Shawn Kwang
a96ed6b4be
web: modified RPCs to use new consent_type table definitions.
...
Added check consent type function for RPCs and Web forms.
2018-06-04 11:26:39 -05:00
Shawn Kwang
6482527bb5
web: refactored code to remove config option enable_record_optin_consent
...
Now the code uses the enabled flag for the consent_type ENROLL to detmerine if a terms of use
is showed to the user and whether or not consent is recorded for this general terms of use.
2018-06-04 11:26:38 -05:00
Shawn Kwang
1f70734f5f
web: modified privacy prefs code
...
Privacy prefs now loads the the consent_types found in the database table dynamically based on the enabled and privacypref flags introduced.
Removed enable_record_optin_consent config settings. Now the 'enabled' field in consent_type takes its place, one a consent_type by consent_type basis.
2018-06-04 11:26:35 -05:00
Shawn Kwang
b0557ef161
web: updated preferences for stats exports to use new consent table definitions.
2018-05-24 12:03:35 -05:00
Shawn Kwang
cbd1b5cc02
web: added consent table to delete functionality.
2018-05-24 12:02:43 -05:00
Shawn Kwang
35b446f243
web: Update web RPCs to use new consent defintions.
2018-05-24 12:02:31 -05:00
Shawn Kwang
4fa8a9faac
web: Updated database, consent and consent_type tables.
...
Also updated boinc_db.inc to add delete_for_use and reflect new table definitions.
2018-05-24 12:00:00 -05:00
Shawn Kwang
a8d7be5854
web: Misc minor changes.
...
Changed name of consent function to be more generic.
Added translation of ops page text.
2018-05-22 15:40:18 -05:00
Shawn Kwang
284694c704
web: Fixed bug, variable restored.
2018-05-17 14:47:02 -05:00
Shawn Kwang
07607ed41d
web: Fixed bug found by Scrutinizer.
...
Removed unused code.
2018-05-17 14:30:11 -05:00
Shawn Kwang
039db259b5
Merge branch 'master' into sak-useroptin-dbaddconsent
2018-05-17 14:14:33 -05:00
Shawn Kwang
4ad801ff30
web: project privacy preferences modified to add 'consent to data export' option.
...
Added new preferences sub-class for consent table modification.
Added privacy preference form item to record user giving consent to data exports.
User's consent is recorded in the consent table.
2018-05-17 14:07:46 -05:00
Shawn Kwang
16846e4986
web: Make sure that the terms of use file exists as well as opt-in consent project config.
2018-05-17 10:50:23 -05:00
Kevin Reed
83ea2bc9ec
web: fixing spacing identified by scruitinizer
2018-05-17 09:58:03 -05:00
Kevin Reed
b6804ab5de
web: add mising closing parenthesis
2018-05-17 09:15:27 -05:00
Kevin Reed
ae7200490a
web: Make the delay after invalidating the autheniticator something that
...
can be customized by projects in the project.inc file
2018-05-17 08:56:45 -05:00
Kevin Reed
f799c9c04b
web: fix issues identified by scruitinizer
2018-05-16 16:26:14 -05:00
Kevin Reed
7172942bb0
web: reorganize code so that error_page is not called in inc files
2018-05-16 16:08:19 -05:00
Kevin Reed
fdf493e3d4
web: use sensible constant values for times in code (improve
...
readability)
2018-05-16 15:43:49 -05:00
Kevin Reed
53250e7d27
web: fix bug in change email where the reversal email was only sent to
...
the new email when not using phpmailer
2018-05-15 14:32:07 -05:00
Kevin Reed
239af2d508
Merge branch 'master' into knr_right_to_erase
...
Conflicts:
html/ops/db_update.php
2018-05-15 13:09:11 -05:00
David Anderson
02a59808b9
Merge pull request #2500 from Uplinger/email_change_notification
...
Email change notification
2018-05-15 09:42:20 -07:00
Keith Uplinger
fecbfa3bd2
Modified the table definition for user table to have email_addr_change_time to be indexed per davids suggestion.
2018-05-10 09:34:39 -05:00
Kevin Reed
f551dd8776
web/server: when a user deletes their account (wipe), set results in progress
...
and results returned but not yet validated to "Client
Detached/Abandoned" status. Let valid results remain. In all cases set
userid and hostid to 0
2018-05-08 17:15:05 -05:00
Keith Uplinger
e82a6984cd
Fixed Scrutinizer issue where variables were declared blank but declared later with string value in inc/email.inc
2018-05-08 15:14:10 -05:00
Shawn Kwang
6fa9a01ea6
web: Add an opt-in consent form to login workflow.
...
When a user logs in, and they have not yet consented, the user is presented with a form to consent to the Terms of Use. This adds or modifies records in the consent table.
Supported logins are: web form, authenticator, email_link, and ldap.
2018-05-08 14:36:05 -05:00
Shawn Kwang
d433bedd02
web: Fixed bugs found by Scrutinizer.
2018-05-08 10:25:13 -05:00
Keith Uplinger
cbcbb5e34a
Merge remote-tracking branch 'upstream/keith_email' into email_change_notification
...
Conflicts:
html/user/am_set_info.php
html/user/edit_email_form.php
html/user/recover_email.php
2018-05-08 08:28:54 -05:00
Keith Uplinger
2905e50dfe
Cleaned up text within email recovery pages.
...
Also, removed excessive code and added an else statement for cleanup
2018-05-07 22:54:28 -05:00
Keith Uplinger
e874a86dab
Removed call to BoincDb::get() as it called within escape_string function.
2018-05-07 22:50:06 -05:00
David Anderson
d0fcd1e729
Various tweaks to Keith's changes.
...
Keith, call me if you want to discuss any of these.
2018-05-07 16:15:51 -07:00
Kevin Reed
4720ab77b4
web: fix issue with password hash caused by merge from master
2018-05-07 16:39:58 -05:00
Kevin Reed
ec98197f23
web: fix bug introduced during merge
2018-05-07 13:31:09 -05:00
Kevin Reed
cff14c4107
Merge branch 'master' into knr_right_to_erase
...
Conflicts:
html/inc/user_util.inc
2018-05-07 13:09:18 -05:00
Kevin Reed
f868227915
web/server: change primary key of user_deleted to userid and
...
host_deleted to hostid
2018-05-07 11:17:45 -05:00
Shawn Kwang
0537feba0c
web: Add functionality of consent to Web site and RPCs.
...
create_account RPC modified to record a user's consent.
am_set_info RPC modified to allow for modification of user's consent.
Account registration on Web site modified to show terms_of_use.txt file and record user's consent.
2018-05-04 18:42:05 -05:00
Shawn Kwang
23640e9a8a
web: Add new tables to database.
...
Add tables consent and consent_type. Projects automatically created with a pre-defined consent_type. When projects update database, pre-defined consent_type will be added as well.
2018-05-04 18:40:14 -05:00
Kevin Reed
bcd853bb4f
web: implementation of wipe account
2018-05-04 17:36:09 -05:00
Kevin Reed
ae17dfb09e
server: add user_deleted and host_deleted output files for db_dump.
...
Also modify db_dump to exclude user records whose authenticator starts
with 'deleted' or host domain names that equal 'deleted'. Those values
are set by the obfuscate delete method.
2018-05-03 15:31:42 -05:00
Kevin Reed
b7bb437aba
web: change primary key for user_deleted and host_deleted to simply be
...
id instead of userid and hostid
2018-05-03 10:38:22 -05:00
David Anderson
678f151037
Factor passwd hash logic into a function
...
... rather than having it duplicated in 3 places.
Please review https://boinc.berkeley.edu/trac/wiki/CodingStyle
2018-05-02 20:09:37 -07:00
Kevin Reed
4002f6d372
web: add logic to insert into user_deleted and host_deleted when account
...
is removed from the system. add task to remove entries from those
tables after 60 days.
2018-05-02 15:36:57 -05:00
Keith Uplinger
4aa5acbc45
Changed email.inc so that it will look for older version of PHPMailer as well as the latest 6.0.x version.
2018-05-02 13:36:16 -05:00
Keith Uplinger
7c9b4ad223
Fixed bug where new email address and change time was not being passed along to email change function
2018-05-02 09:46:34 -05:00
Keith Uplinger
aaf866ebb0
Delete token for email recovery.
2018-05-01 21:30:50 -05:00
Kevin Reed
e821de2643
web: add logic to insert into user_deleted and host_deleted when
...
deleting a user
2018-05-01 17:08:29 -05:00
Kevin Reed
762c052315
Merge pull request #2487 from BOINC/dpa_util
...
move random_string() and dtime() from util.inc to util_basic.inc
2018-05-01 14:02:44 -05:00
David Anderson
5914060d4b
web: change names of admin functions to e.g. admin_show_user()
...
to avoid conflict with non-admin versions
2018-05-01 10:47:38 -07:00
Keith Uplinger
69f78a69cd
Fix bug where I was sending it a null string to lookup_prev_email_addr
2018-05-01 12:13:39 -05:00
Keith Uplinger
4785a05784
Fixing missing ending call in function.
2018-05-01 11:11:25 -05:00