Verified Commit 4cc8b1dc authored by Benjamin "Ziirish" SANS's avatar Benjamin "Ziirish" SANS
Browse files

extended ACL are disabled by default (fix #248)

parent 44951c63

CHANGELOG.rst

+2 −2
Original line number Diff line number Diff line
@@ -4,9 +4,9 @@ Changelog 
Current

-------



- **BREAKING**: the *BASIC* `ACL` engine will now grant users on all agents if they are not explicitly defined

- **BREAKING**: the *BASIC* ``ACL`` engine will now grant users on all agents if they are not explicitly defined

- **BREAKING**: the *Burp1* and *Burp2* configuration sections have been merged into one single *Burp* section

- **BREAKING**: the *running* backups are now displayed in `green` instead of `blue`

- **BREAKING**: the *running* backups are now displayed in ``green`` instead of ``blue``

- Add: new plugins system to allow users to write their own modules

- Add: `Italian translation <https://git.ziirish.me/ziirish/burp-ui/merge_requests/74>`_ thanks to Enrico

- Add: `backups deletion <https://git.ziirish.me/ziirish/burp-ui/issues/203>`_

docs/advanced_usage.rst

+1 −1
Original line number Diff line number Diff line
@@ -620,7 +620,7 @@ Now you can add *basic acl* specific options: 
    [BASIC:ACL]

    # Backend priority. Higher is first

    priority = 100

    # Enable extended matching rules

    # Enable extended matching rules (disabled by default)

    # If the rule is a string like 'user1 = desk*', it will match any client that

    # matches 'desk*' no mater what agent it is attached to.

    # If it is a coma separated list of strings like 'user1 = desk*,laptop*' it

docs/upgrading.rst

+9 −9
Original line number Diff line number Diff line
@@ -10,20 +10,20 @@ For a complete list of changes, you may refer to the 
v0.6.0

------



- **Breaking** - The *BASIC* `ACL` engine will now grant users on all agents if

  they are not explicitly defined. It means that if you have a user called

  `example1` with two agents (burp servers in multi-agent mode) on which you

  have respectively two clients called `example1`, the user `example1` will be

  granted on both clients on the two agents. You can disable this behavior with

  the `legacy` option. See the `BASIC ACL <advanced_usage.html#basic-acl>`__

  documentation for details.

- **Breaking** - The *BASIC* ``ACL`` engine will now grant users on all agents

  if they are not explicitly defined. It means that if you have a user called

  ``example1`` with two agents (burp servers in multi-agent mode) on which you

  have respectively two clients called ``example1``, the user ``example1`` will

  be granted on both clients on the two agents. You can disable this behavior

  with the ``legacy`` option. See the

  `BASIC ACL <advanced_usage.html#basic-acl>`__ documentation for details.



- **Breaking** - The *Burp1* and *Burp2* configuration sections have been merged

  into one single *Burp* section. See the

  `Versions <advanced_usage.html#versions>`__ documentation for details.



- **Breaking** - The *running* backups are now displayed in `green` instead of

  `blue`.

- **Breaking** - The *running* backups are now displayed in ``green`` instead of

  ``blue``.



- **New** - Plugin system to enhance ACL and Authentication backends. See the

  `Plugins <plugins.html>`__ documentation for details.

share/burpui/etc/burpui.sample.cfg

+1 −1
Original line number Diff line number Diff line
@@ -231,7 +231,7 @@ noserverrestore = false 
#[BASIC:ACL]

## Backend priority. Higher is first

#priority = 100

## Enable extended matching rules

## Enable extended matching rules (disabled by default)

## If the rule is a string like 'user1 = desk*', it will match any client that

## matches 'desk*' no mater what agent it is attached to.

## If it is a coma separated list of strings like 'user1 = desk*,laptop*' it