openproject

Commit Graph

Author	SHA1	Message	Date
Christophe Bliard	21a696ef9b	Update copyright information for 2023	2 years ago
ulferts	e25d2f14ee	cleanup policy (methods) no longer used	2 years ago
Christophe Bliard	bc8d423ec2	update copyright information for 2022	3 years ago
ulferts	0fe90c21a7	rework hidden/starred of queries The MenuItems::QueryMenuItems class used to map the `starred` state is replaced by a simple boolean flag. The hidden flag is removed (but still readable) as the concept of `View`s completely replaces it.	3 years ago
Oliver Günther	ccfa29c728	Move license and copyright docs to root, fix names and references	3 years ago
ulferts	1bdd2ab9ae	safe automatic fixes by rubocop (#8994 )	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925 ) Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
ulferts	6af7401704	fix ruby 2.7 deprecations (#8866 )	4 years ago
ulferts	9e2287bfcc	rename and inflect according to zeitwerk	5 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
ulferts	a5defb73c5	add dedicated permission to regulate assigning a version	5 years ago
Oliver Günther	bc06da3a00	[30231] Allow users edit_work_packages permission to save query https://community.openproject.com/wp/30231	6 years ago
Jens Ulferts	395c665627	do not allow edit when user only has comment permission	6 years ago
Jens Ulferts	24bcf147f2	lift project restriction from children table	6 years ago
Oliver Günther	1ffeedbd5d	[27606] Allow inline-create in embedded children tables https://community.openproject.com/wp/27606	7 years ago
Oliver Günther	d591e8ae4c	[27600] Add link to query_form to represent allowing new queries to be saved (#6293 ) When an existing query (and its form) is loaded, members with permissions to create new queries, but NOT to update existing ones can not save existing queries as new ones. This is due to the `create`, `update` and `commit` (on form) links are dependent on the query resource itself, not on general permissions of the queries project. https://community.openproject.com/wp/27600 [ci skip]	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171 ) [ci skip]	7 years ago
Jens Ulferts	6d43f1718e	remove experimental api	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Jens Ulferts	34b26a4ff4	add service specific for adding notes to a work package	9 years ago
Jens Ulferts	da7b1d1c40	define project changing behavior in wp contract	9 years ago
Oliver Günther	a6b4372b09	Always preprocess URLs with CGI.unescape This forces redirect URLs to always pass through the escaping process, in order to process escaped paths (`/mysubdir/%2E%2E/secret/`).	9 years ago
Oliver Günther	fcd450af3f	Fix redirect vulnerability `redirect_back_or_default` was vulnerable to some of the URLs found to be vulnerable in redmine, such as `@test.foo`. This commit extracts the whole functionality into a policy and alters the constraints with a path check to avoid these cases. Thanks to @marutosi for pointing this out. http://www.redmine.org/projects/redmine/repository/revisions/14560	9 years ago
Oliver Günther	b8c210e983	Resolve LoadError for scm policy	9 years ago
Oliver Günther	14a394842d	Extract SCM authorization routines into policies per vendor	9 years ago
Alex Coles	29d9814347	Prefer Project.allowed_to to .allowed_to_condition Use `ActiveRecord::Relation#merge` to merge scopes. Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	e0012a6e92	Fix syntax (w/Rubocop) in VersionPolicy Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Jens Ulferts	f05ec67eb3	use policy to calculate version link existence	10 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 [ci skip]	10 years ago
Alex Coles	4c6623e0ae	Fix syntax (w/Rubocop) in policies Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Hagen Schink	f3ebc8c37b	Check manage subtasks permission on child's project	10 years ago
Hagen Schink	d26d1502b4	Move WP manage subtask authorization to model	10 years ago
Philipp Tessenow	8237010d31	add 'show' action to QueryPolicy	10 years ago
Hagen Schink	ef039b32ec	Correct query deletion verb on server side	10 years ago
Jens Ulferts	f7d92b156e	fixes permission links on query	10 years ago
Jens Ulferts	4817547d4a	introduces policies The pattern used here is taken from pundit although this here does by far not have the functionality pundit offers.	10 years ago

38 Commits (dev)