internetee / registrar_center2 Goto Github PK

When user changes the pagination value for displaying certain number of records per page any filters set for the list is reset to default. So currently user has to first set the pagination setting and then filter the values needed.

The filter values of the current page should be preserved if user changes the pagination list length value

Not all the sub-objects/parameters have delete link so for example its not possible to delete first contact (usually admin) while the next ones have this option. Similarly its not possible to delete first two nameserver records and first DNSKEY record

contact and domain search in the portal works only with full string matches, alternatively users can use the % sign as wildcard but that would require them to know SQL and that we are making sql searches in the background. In the current portal its possible to enter partial string and search result is returned so in domain search entering test will return any domains that have string test in the name including test.ee goodtest.ee, test123.pri.ee etc Same goes for contacts

on trying to replace admin contacts on multiple domains with another one i received an error message:

Admin contacts must be identical

That is expected as old and new contact do not share identical ident data. THat being said the error message could be more specific saying "New and old contacts' ident data must be identical"

There is no way to cancel the bulk change request. meaning even if i leave the view, refresh the portal, when i press again in the bulk change link i am brought back to the previous unsuccessful bulk change request with no way to change nor cancel it. Being stuck with this:

Goal is to enable registrars to manage their own users and their accesses:

• add/remove users
• set user access rights (billing, epp, both)
• set expiration date for access
• manage IP whiltelist to enable access to the portal
• manage PKI certificates (view (alarm when expiration date is closing and it has arrived), create, sign, revoke, remove)

The regsitrar user that has privileges to manage registrars' users must be added only using admin interface (is super user) this shuld be preferably the accredited user. Users added using the portal for registrars do not have access to user management functionality.

Currently XML console is accessible for everyone including billing users that do not have access to epp/repp APIs. XML console is irrelevant for those users and thus would be better to hide

Saved the domain list into csv using one user's account and tried to use this file to transfer a domain to a new registrar. Received "object does not exist"

sample file used in staging
Domains_2022-06-30_11.57.csv

removed header row from the csv file and left it blank

only one domain in the file. On bulk transfer received object does not exist error

added another row to the file with non-existing domain record. Now received green message saying no domains transfered

in any case the issue was with malformed csv file - missing header row with correct headings. The error should be about invalid csv format ie "Invalid csv file - missing headers"

.ee does not require or store postal addresses for domain contacts. Registry software supports optional and mandatory postal address configurations for standard compliance

there is a system setting for that on registry side called "Address processing" configurable in registry admin.

ideally this setting should also be taken in consideration by the registrar portal and if processing is disabled then the postal address fields should not be shown to registrars at all

Its not possible to remove all nameserver records from the domain registration - error is returned:

Data management policy violation; Nameserver count must be between 2-11 for active domains [nameservers]

similarly to dnskey issue (#56) its not possible to remove the last record and as policy of .ee still requires 0 or at least 2 nameserver records for every domain the error is raised

We need to remove any non-character (ie space, tab, line/carriage return) from the entered values that do not support those - dnskey and email address are two of such values.

Expected result: if user enters dnskey value that has a space in the key, the space is trimmed automatically and the value sent to registry and saved to database is already without that non-character.

The solution would be more universal if we could enable trimming on epp/repp level but if that is too complicated then having it in the registrar portal create contact form would also suffice.

exporting account activity log into csv will result with csv file that contains up to 200 rows of data

account_activities_20220915135811.csv

EPP support virtually any character in the passwords, but its not the same case with the portal for registrars

for example a user that had ':' sign in the password was able to log in to epp but not to the portal for registrars

Currently we restrict access to the portal post authentication. So anyone can get to the portal and start authenticating.

Lets bring the limitation a step ahead and limit access to the ui anyone coming from non-whitelisted IP. So each user trying to get access to the portal ui needs to come from only whitelisted domains - before returning user the option to authenticate the ip should be checked against the full list of allowed IP addresses. If IP is present then login screen is returned, if missing then errror is returne indicating that user is not allowed to access this page/service

to add credit on the registrars account it's currently required to use . as a decimal separator. In our culture comma is used for that so it should also be supported by our apps.

In the bulk operatsions selection there is an option called "replace registrar" that might leave wrong impression about what the operation is about. As domain transfer is totally different operation from domain update on the epp/repp level as well then I think it's is better to stick with the rfc terminology and call the operation "bulk transfer" or just "transfer" as it is listed in bulk change type selection

Clear filter link not emptying all form fields

Internal error is returned when registering a domain with umlauts - registration itself is actually successful
another internal error is returned when trying to access the info of a registered domain with umlauts

Internal error in production when registrar tries to send a registrant update request with attached legaldoc in registrar portal.

The domain already has a pending update status set probably being the cause of the internal error.

From the logs:
https://gist.github.com/ratM1n/6bbafaf28feb876b4286fccb97d5fef2

We need to inform users about the cookie usage in more detail and provide option to block unnecessary cookies

We consider all cookies needed for the intended functionality of the portal to be requires including locale setting cookies

Third party cookies are optional and user must be informed and able to deny those - these are marketing and analytical cookies.

Implement user notification and options to allow or deny non-critical cookies

https://docs.google.com/document/d/1INdOaCeUdIkEkuVeilQ3LtXvxIckaYdG7EfXe0z4Jko/edit?usp=sharing

Users are always greeted with English version of the registrar portal

In registrar profile in registry we have parameter/preference called language that we could use as an input for the language selection to the registrar portal

To reproduce:

1. go to contact list page
2. access a contact details page by clicking on a contact
3. at the bottom of the view there is the list of domains related to that contact - chaging the pagination setting at the bottom of that list results in internal error

Note: This is most probably for the new registrar portal and not worth the effort in the current one

• Current registrar portal does not provide option to set transfer code by regsitrar on domain registration or change it with domain update even though the functionality is there and usable over EPP API.
• Secondly to make changing transfer code easy the interface could have some button like solution in case registrar needs to do a quick code change (ie in case the current code has leaked) - button executes regular domain update request with autogenerated new code
• As an additional feature the transfer code should be automatically changed on registrant change

EIS has not collected postal addresses for years so lets remove the postalInfo elements from contact create and contact update sample requests

"Structured reference is not allowed for this e-shop"

this happens when user presses pay button in invoice detail view
payment works with the pay icon in the invoice list view

reproduceable on staging with master branch

will this work?

Users that do not have billing role for the registrar portal do not see current balance and thus have no idea if there is enough funds on the account.

all users should be able to see the info, but only billing users can add credits, see and manage invoices and billing history

Every month we generate 0 sum invoices to registrars listing their monthly account activities (wo deposits) - paid operations from their prepayment account

currently we run a script in the registry that send the report to directo accounting system and from there registry admin forwards the invoices to registrars.

script for generating and forwarding monthly invoices to directo:
DirectoInvoiceForwardJob.perform_now(monthly: true)

New system should generate and send the monthly invoices/reports to registrar official or billing email and send an e-invoice via FinBite identically to regular invoices. No need to save the invoice files to registry or registrar portal db.

On the invoice there is a separate row per every zone and period - ie 1. all .ee registrations/renewals for 1 year, 2. all .ee registrations/renewals fo 8 years, 3. all .pri.ee registrations/renewals for 5 years etc
and the last line of the invoice is the sum deducted from the prepayment account making the sum of the invoice 0

The invoice should be sent out automatically at the beginning of each month covering previous month account activities.

The invoice should still also be sent to directo for our own accountant to make the transaction from debt to income accounts.

There are filtering options available in the registrar portal account activity view that enables registrars to get the information from what ever period. It just lacks some summary info in the report view like count and sum of the rows and credit account balance in the end of the reports (and maybe also at the beginning of the report)

So as the result of this the difference in comparison too current one should be that the invoices are sent to registrars automatically from registry instead of manually from directo and there should be an option for registrars to get the same data from registrar portal as well.

To reproduce:

1. go to domains list view
2. open filter selection
3. enter any existing registrant object in the registrant name field
4. press filter button - "no domains found"

contact ident search does not search in registrants so there is no way to search for domains by the registrant

in the users profile view linked users section there is info about the user name and role, but the registrar name is missing. Username might not be descriptive enough to be clear which rar it's associated to . Please add registrar name to the list as well.

add new view to registrar portal for statistics.

First piece of stats will be market share that we are currently sending to registrars on quarterly basis. In the portal the stats will be renewed daily

market share statistics

• pie chart showing market share distribution - logged in registrar should be highlighted
• line graph showing current registrars market share trend (default: monthly)
• table with the raw data similar to what we send to registrars now (default: monthly; sample below)
• option to download the stats in the spreadsheet form similar to what we send to registrars now (sample below)
  filtering options to change the timescale - daily, weekly, monthly, quarterly, yearly, custom

sample:
turuosa.ods

for charting we have used and are using highcharts (https://www.highcharts.com/) on our webpage (https://www.internet.ee/help-and-info/statistics) currently. But its not mandatory to use the same here.

Its not possible to remove the last dns key record

if a domain has a single dnskey record associated and registrant wants to using their domain its not possible via the registrar portal as the ui does not allow deleting the last record set

even deleting the values in the form manually one by one does not do the trick

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• Update dependency esbuild to ^0.20.0
• Update dependency rails to '~> 7.1.0', '>= 7.1.3.2'
• Update dependency ruby to v3.3.1
• Update GitHub Artifact Actions to v4 (major) (actions/download-artifact, actions/upload-artifact)
• Update dependency @hotwired/turbo-rails to v8
• Update dependency sass-migrator to v2
• Update dependency vanilla-cookieconsent to v3
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• Update dependency @fortawesome/fontawesome-free to v6
• Update dependency highcharts to v11

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

Currently xml console sample requests include only poll req sample
Lets add poll ack as well - difference is the required msgID element

rename current poll request to Poll req and new sample to Poll ack

if a user removes first or second nameserver record and presses add more to replace it with new the new form will appear named Nameserver 3

For example i made a bulk technical contact change - after submitting the request the portal returned message about two domains updated and 0 ignored, but i was hardly able to read through it before it was removed from the view - it was shown only for couple of seconds

Leave the message there until user changes the view for example

• in admin change the allow list so that each record has one ip address ipv4 or ipv6 (currently there is an option to have v4 and v6 in a single record)
• in the IP address list show the date when the ip was added to the list and by whom
• create configurable limit for allowed ip addresses per registrar - configurable in admin settings.
  • the limit/counter needs to support network addresses being able to count the number of addresses in the range. So for example if the limit is set to 256 addresses then a registrar can have one /120 IPv6 network address or four /26 IPv4 network addresses or one /121 IPv6 address range (128 addresses), one /26, /27, /28, /29 and /30 address ranges (124 addresses) and 4 individual IPv4 or IPv6 addresses (256 in total)

related to: internetee/registry#2428

New monthly invoices are listed as unpaid (receipt date value). That can be confusing.
Lets add new label to the ui marking those as monthly invoices and enabling users to search/filter those invoices using the status filter