pfSense

fix permissions check to xml package files and show only menus user has access to

Fix missing $ on variable.

Sort user privileges so dashboard/index.php come first, so if a user has those permissions, they get redirected there first and not to another page.

Fix privilege matching so that it respects wildcards better, especially when leading.

Remove trailing carriage return

Get user pages as well as group pages. Fixes #735

Overhaul the user login system to use the Servers tab as its base.

Fix quite a few problems down the way.

Add priv.defs.inc to authgui.inc

Load pkg privs from /usr/local/pkg/priv if it exists

Roll custom run_plugins routine

Make item a global

Require util.inc for run_plugins

Rename isAllowedPageUser() to isAllowed(). Add and move user priv items to /etc/inc/user.priv.inc. New privs can be added to this /etc/inc/priv/ directory and they will be automatically processed (packages, etc).

Revert isAllowedUser commit and duplicate function to isAllowedPageUser()

Set 2nd parameter for isAllowedPage. Will be required for #34, 33, 32

fix error

Allow a username. Default to _SESSION['Username']

Rework includes/require. This saves about 4 megabytes.
Simplify get_memory(). Tested on mips/i386

Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions

• Move functions that output html to guiconfig.inc
• Remove some recursive dependency on some includes
• Remove ^M or \r from files
• Remove some entries from functions.inc to avoid including them twice
• Remove some unneccessary includes from some files
  ...

Moves the protocol and certificate options out of the general config page
to the Advanced admin access tab. The thought is that they should be next
to each other. The certificate management has also been modified to use
the centralized certificate manager. I took the liberty of removing the...

Remove the page locking privileges after discussion with Scott on IRC. The
feature was confusing and offered little utility that I could see. If we
really need to provide serialized access to sections of the webui, IMO it
should be a global lock option and enabled or disabled manually and not a...

Correct a regression in the privilege system where pages were not being
matched correctly. Reported by Seth.

Cleanup authentication code. The basic auth method, the passwd, htpasswd
and pam backing functions have been removed. The basic auth method was
legacy code and the backing functions were redundant with no added value
that I could see. A simplified replacement backing function named...

Rewrite the pfsense privilege system with the following goals in mind ...

1) Redefine page privileges to not use static urls
2) Accurate generation of privilege definitions from source
3) Merging the user and group privileges into a single set
4) Allow any privilege to be added to users or groups w/ inheritance...