openproject

Commit Graph

Author	SHA1	Message	Date
Oliver Günther	99a8b3f140	Fix how we gather and derive sampling traces for sentry (#9395 ) We previously defined a fixed tracing rate AND a sampling tracer in the backend, which result in everything to be traced regardless of the actual rate. We now define a base rate for certain requests, so that we can exclude health checks and other things. The configuration is now a factor (0 = off, default) (1 = use suggested rates), any other value x (x multiplied by suggested rates)	3 years ago
Oliver Günther	7bbdcd8d1e	Bumped version to 11.3.3 [ci skip]	3 years ago
Markus Kahl	eaf839df8a	make sure log context is hash rather than, say ActionController::Parameters	3 years ago
ulferts	849b5aee22	Bumped version to 11.3.2 [ci skip]	3 years ago
ulferts	a8c075e258	[#37583 ] Error "Identifier is invalid" (#9373 ) * [#37583] Error "Identifier is invalid" Happens when creating a project that starts with a digit or a hypen. The functionality is added by extending acts_as_url to support a custom_rule lambda. https://community.openproject.org/work_packages/37583 * handle empty base_url in acts_as_url custom_rule	3 years ago
Oliver Günther	46b85e5a47	Bumped version to 11.3.1 [ci skip]	3 years ago
Oliver Günther	a021379a98	Fix version to 11.3.0	3 years ago
ulferts	6cda6ad4fd	enforces dependent project modules being active (#9311 ) Project modules, e.g. calendar can define dependencies, e.g. work packages. An error message is now displayed if a user enables a project module without the dependency being active in the project as well. Also fixes a serious bug in the Shared::ServiceContext module. Whenever a failing service result is returned, every change to the database is to be rolled back. This was not true when a model was provided since the changes where carried out within an inner transaction	3 years ago
Benjamin Bädorf	0b7a9954be	Fix form styles again (#9284 ) * Invite User button in dynamic SelectInputComponent (#9267) * change order in integrations Nextcloud is above FAQs [ci skip] * update locales from crowdin [ci skip] * Invite User button in dynamic SelectInputComponent * Update README.md Nextcloud priority higher [ci skip] * showAddNewUserButton in MultiSelectEditFieldComponent * showAddNewUserButton naming consistency * update locales from crowdin [ci skip] * prevent avatar getting squashed * Embed openproject-edition addon to use latest gltf2xkt version * Embed openproject-related packager addons * fix displaying `multi` toggle in cf form (#9269) * Install xeokit-gltf-to-xkt@1.1.1 for BIM * Fix/add subproject only flow (#9268) * allow users only having add_subproject to create subprojects * remove reference to no longer existing projects controller action * Fixed roles and permissions documentation link (#9271) * update locales from crowdin [ci skip] * Fix/project in user invite validation (#9272) * validate project in invite modal The user might have the manage_member permission in a project but not necessarily in the one the modal is opened in. * resurface invite_user_modal spec deleted in `b50298eb30` * allows users without manage_placeholder to add placeholder to project * replace legacy spec * Fix board creation modal layout (#9274) This got broken when refactoring all the modals to `op-modal` styling. All this commit does is increase the width * always create a wiki if clicking on "wiki" menu item (#9273) Previously, this only happend if a template is defined. Ideally, the page would not be created but only displayed for the user to save then. But this solution is easier to implement. * Update README.md * [30226] Derive user id from link in create autocompleter (#9275) The CreateAutocompleter doesn't get an ID for the user, so we have to derive it from its href. https://community.openproject.org/wp/30226 * [37257] Bust cache on settings name format change (#9276) * [37257] Bust cache on settings name format change https://community.openproject.org/wp/37257 * add specs for user representer cache busting & avoid patch Co-authored-by: ulferts <jens.ulferts@googlemail.com> * Always run the synchronization service as the system user (#9278) * Feature/36382 improvements (#9266) * Show backend validation errors in toast instead of a generic message * Include disabled field values on submit * Documentation improvements * Dumber OpFormFieldComponent: control, error and help settings as @Input * Create fieldGroups programmatical from @Input * fix: new project from themplate. Prioritize backend model * Show backend validation errors in toast instead of a generic message * Include disabled field values on submit * Documentation improvements * Dumber OpFormFieldComponent: control, error and help settings as @Input * Create fieldGroups programmatical from @Input * fix: new project from themplate. Prioritize backend model * Setting template payload through DynamicForm @Input model * Tests fixes * Seet public-read ACL on capybara screenshots * New Project: reset form when template changed + keep name * fix: avoid OpCkeditorComponent >>> FormattableEditFieldComponent >>> OpCkeditorComponent rawValue loop * PR Review changes * Unit tests fixes Co-authored-by: Cyril Rohr <cyril.rohr@gmail.com> * Invite User button in dynamic SelectInputComponent * showAddNewUserButton in MultiSelectEditFieldComponent * showAddNewUserButton naming consistency Co-authored-by: RBernsen <61973994+RBernsen@users.noreply.github.com> Co-authored-by: OpenProject Actions CI <operations+ci@openproject.com> Co-authored-by: ulferts <jens.ulferts@googlemail.com> Co-authored-by: Cyril Rohr <cyril.rohr@gmail.com> Co-authored-by: Benjamin Bädorf <hello@benjaminbaedorf.eu> Co-authored-by: Oliver Günther <mail@oliverguenther.de> * Bump version to 11.4.0 * Fix form styles again https://github.com/opf/openproject/pull/9266 probably broke these styles again. This PR reintroduces them. Co-authored-by: Aleix Suau <info@macrofonoestudio.es> Co-authored-by: RBernsen <61973994+RBernsen@users.noreply.github.com> Co-authored-by: OpenProject Actions CI <operations+ci@openproject.com> Co-authored-by: ulferts <jens.ulferts@googlemail.com> Co-authored-by: Cyril Rohr <cyril.rohr@gmail.com> Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
ulferts	bd3eaf539e	update webinar link	4 years ago
Oliver Günther	6c75e16dc4	[37140] Use acts_as_url to generate unique slug for identifier (#9250 ) * Use acts_as_url to generate unique slug for identifier * Re-enable project identifier spec now handled in backend * Add integration spec for set attribute service * Adapt spec for new empty identifier * Avoid double error messages for empty identifier acts_as_url may return an empty string depending on the name, but the empty presence validation will suffice in this case, we don't need the invalid validation * Fix stubbed errors object accessed by acts_as_url * Avoid trying to get the upstream unique attribute in case of errors * Remove sequential_project_identifiers setting * Adapt spec to review feedback	4 years ago
Oliver Günther	9547d28e95	Ensure the payload sent to notifications is a hash (#9253 ) This does not change our interface to notifications, but ensures that the payload is always a hash, as some integrations (e.g., Sentry!) depends on it.	4 years ago
Oliver Günther	b0e7205276	Bumped version to 11.2.5 [ci skip]	4 years ago
ulferts	d9af10f84d	bump rails to 6.1.3.2 (#9228 ) Fixes CVEs: * CVE-2021-22904 * CVE-2021-22885 * CVE-2021-22903 * CVE-2021-22902	4 years ago
ulferts	5cb227796c	Fix/hook service to openproject (#9214 ) * move specs from legacy * move Hook into OpenProject namespace * replace class variables	4 years ago
Oliver Günther	9256c9b46c	Allow to disable ldap groups sync with env flag (#9211 )	4 years ago
ulferts	ce5e06dde2	Fix/non matching pagination (#9202 ) * fix duplicates returned for wp list on multiple matching attachments/comments LEFT JOIN leads to potentially having multiple records returned if a search string is present in more than one attachment/comment. This is not a problem if we fetch work packages directly out of the query results but becomes problematic if only the id is fetched and then used to get the work packages by a subquery. * attachment filters no longer differentiate on tsv_where concatenation As EXISTS and NOT EXISTS is now used, the full string is always to be searched for so `and` concatenation is now always employed. * adapt spec Work packages that have no attachment at all are now also considered to match the filter if a "doesn`t contain" operator is used * less strict rspec rubocops for feature specs * cleanup code	4 years ago
Oliver Günther	2896afe6c4	Assign project identifier in backend (#9196 ) * Introduce localizable slug url Stringex currently works only with english strings for wiki. But that default is actually confusing. Instead, add an explicit localizable helper that receives the locale and sets the stringex backend locale temporarily * Generate a default identifier in the backend * Remove JS based identifier updating * Remove identifier attribute * Add button to change identifier * Adapt tests to changed identifier * Linting * Fix invalid selector	4 years ago
Markus Kahl	8c8b8bbfa7	create backups via UI (#9136 ) * create backups via UI * Fix import of modal service * introduced backup token and addressed remaining comments * allow disabling permissions * improvements - only make user wait to use backup token in if really necessary - notify admins of new backup token - disable 'include attachments' option in UI if unavailable - documentation - misc * spec fixes * fixed feature spec * allow setting capybara host in every case * removed unused style file * addressed review feedback, added further feature specs * polish (code climate) * Avoid empty attachments * Don't raise filesize validation for internal exports Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
Oliver Günther	5920ace376	[37024] Make system user permanent admin (#9192 ) * [37024] Make system user permanent admin https://community.openproject.org/wp/37024 * Yield self from run_given * Fix count for admin in bim seeder	4 years ago
Oliver Günther	788a7086eb	[36981] Make active_record_store the default (#9179 ) Currently, we're using the cache store for almost all environments by default For the majority of installations, the performance hit to use SQL sessions is negligible while the advantages are known: SQL store enables session features such as the builtin termination of old sessions during logout (on by default) and login (off by default). SQL store do not expire until desired, preventing the cache exhaustion logout problem on e.g., community https://community.openproject.org/wp/36981	4 years ago
Oliver Günther	8c632139e8	Allow plugins to define global_styles.sass (#9176 ) * Allow plugins to define global_styles.sass * Add generated sass to gitignore	4 years ago
ulferts	ff09b3b4cc	Bumped version to 11.2.4 [ci skip]	4 years ago
ulferts	9fa5599392	Feature/member notifications (#8958 ) * spec with correctly scoped links * move db check into own file - fix deprecation * basic spec for member creation service * use constants for all notifications * send an OP notification after member has been created * send an OP notification after member has been updated * mails on group member added Depending on whether the membership existed before or not, an updated or a created notification is send. This is done asynchronously. * move all mail sender background jobs into namespace * wip * wip * correct handling group member notifications * add setting enable/disable mail sending on member alterations * use services in members controller * move Notifiable to OpenProject * remove member after save hooks * cleanup/testing/linting * render member mails in receiver locale * remove add_member! method * use mailer layout for all mailers * Update app/services/groups/cleanup_inherited_roles_service.rb Co-authored-by: Oliver Günther <mail@oliverguenther.de> * use around callback to avoid prepending * handle nil params Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
Benjamin Bädorf	64143001fc	Set moment locale globally (#9040 ) * Set moment locale globally This sets the moment locale to the application locale globally, ensuring that moment uses the right translation strings wherever applicable. However, since we only work with languages (en), and not real locales (en-US), the first day of year calculation has to default to some option. This commit defaults to ISO 8601 for every language and locale. * Add setting to mark dayOfYear * Fix NaN check * Add spec for switching settings * Output uniq github specs Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
ulferts	901cbada65	Feature/gem update task (#9165 ) * task for updating gems * task for updating used rubocop on codeclimate * combine into default update task * bump aws-partitions * bump aws-sdk-core * bump aws-sdk-s3 * bump bootsnap * bump debug_inspector & i18n & loofah & nokogiri * bump delayed_job_active_record * bump doorkeeper * bump dry-logic * bump excon * bump connection_pool & faraday & faraday-excon & faraday-net_http_persistent & net-http-persistent * bump fog-aws * bump marcel * bump nokogumbo * bump oj * bump parallel_tests & ruby-saml * bump parser * bump prawn-markup * bump rexml * bump rspec-rails * bump rubocop * bump sentry-delayed_job * bump sentry-rails * bump sentry-ruby & sentry-ruby-core * bump unicorn & unicorn-worker-killer * bump webmock * use rubocop-1-10-0 on codeclimate * whitelist i18n patch * bump listen * rename update task to avoid misconceptions * bump faraday & faraday-excon & faraday-net_http_persistent	4 years ago
Philipp Tessenow	bd906716e5	[#36153 ] link manually created pull request to a work package using the GitHub integration plug-in (#9070 ) * Receiving and Parsing GitHub webhooks * added services for upserting PullRequests, GitHub users, and, checks. * added the datamodels for storing these entities * added logic to parse GitHub webhooks and save the entities above * fix some specs, added model specs * let UpsertPartialPullRequest return the upserted PR * added the last missing specs * avoid double-posts when editing pull requestsx * attempt to reduce flakiness * added pull requests API endpoint * handle edge case of converting partial PRs to full PRs * name raw input of an upsert service 'payload' to differentiate it from the prepared params * handle edge case: partial upsert after full PR creation * github_user does not reference users anymore * fixed a doc comment * use enums instead of custom validations * WIP * pairing with jens and some cleanup and test writing * better migration, clear up old PRs with a cron job * handle case of non-edit events which do not introduce new linked work packages, but still require a comment	4 years ago
Oliver Günther	2b0bce6b5c	Improve message when nulldb is being used (#9156 )	4 years ago
Oliver Günther	693d01f8c7	Bump Sentry and implement log handling in core (#9133 ) * Bump Sentry and implement log handling in core * Manually insert the sentry middlewares * Also add user locale as tags * Add performance tracing * Update sentry host to sentry2 * Update frontend sentry-reporter to the new sdk * Silence delayed_job's own logger since activejob logs already Delayed::Job will otherwise always log all arguments, which we disable by design * Remove default sentry host	4 years ago
Oliver Günther	c33e303bfe	Bumped version to 11.2.3 [ci skip]	4 years ago
Oliver Günther	2d902749d2	Load patches in initializer, not in individual patches	4 years ago
ulferts	4bf7a26eb1	Capabilities API (#9083 ) * Capabilities API * introduce auxilliary capability model * capability model and query * render in sql * fix pagination * introduce sql representer * extract abstract sql representer class * remove yet unused methods * abstract sql collection representer * contract_actions as part of permissions * filter for capability id - used in GET * id filter validation * remove unused representer * remove unused wp representer * reuse renaming class * add spec for access control * add principal filter to capability * add context filter * extract capability sql into scope * admin gets all capabilities * require to have one filter set to keep performance bearable * consider active project modules for capabilities * limit capability based on principal visiblity and user state * rework capability to be tableless * spec not being allowed to see on request level * add actions to capability representer * add action api * extract sql index endpoint * remove unused class * prepare sending signaling error - not yet frontend exposed * extract show endpoint for sql rendered responses * use UNION for better performance * include navigation links on collections * remove string replacements * extract collection representer into hal sql module * no capabilities when blocked * remove commented out code	4 years ago
Oliver Günther	de0f155c94	Use ActiveSupport::Logger to support .silenced	4 years ago
Oliver Günther	065dfbddc4	[36467] Add API users form and schema endpoints (#9090 ) * Add Users form endpoints * Avoid cache_if as it caches properties for new_record? as well * Add specs * Add missing custom_field_values method * Fix missing firstname lastname api conversions * Disable cached_representer on user payload * Add patch to allow using our custom setter in case of nil values https://github.com/trailblazer/representable/issues/234 * Add test for changing status * Fix expectation with changed attribute mapping * Disable rendering name property for users The name property is not accessible directly for users * Fix attribute names for first and lastname for writable * Ensure password is marked writable even though its not an attribute * Avoid explicitly setting to_ar_name conversion * Reuse AssignableCustomFieldValues concern * Fix structure of users.apib to be flat * Extend requests with custom fields * Output name, but dont mark as writable attribute * Fix id indentation * Rename schema email property * Fix param for user update form * Fix schema docs	4 years ago
Oliver Günther	219df2130a	Bumped version to 11.2.2 [ci skip]	4 years ago
ulferts	7e68bd8ce1	avoid nil for wiki page slugs as they would be invalid (#9081 ) * avoid nil for wiki page slugs as they would be invalid Also explicitly enables having "!" for a wiki title but fails hard for all cases, which are not handled by default or custom. * move legacy specs over	4 years ago
ulferts	c7dad28506	fix patch check	4 years ago
Oliver Günther	aca807b45a	Explitly import patches module (#9080 )	4 years ago
Oliver Günther	6fde8cc32a	Add patch to I18n to replace empty strings with nil (#9068 ) * Add patch to I18n to replace empty strings with nil * Add common patch_gem_version helper	4 years ago
ulferts	c4c33e9a68	Bumped version to 11.2.1 [ci skip]	4 years ago
ulferts	7ecf08e005	rework changed_by_system (#9043 ) Before, it was implemented by passing the changed attribut keys over to the contract to whitelist them. This lead to: * The contract interface becoming bloated * Having to rely on the knowledge of the developer not to falsely whitelist an attribute. The developer would also have to make sure to not perform a mass assignment after the attribute has been whitelisted The new approach it to integrate the behaviour into the model which is first altered in the service before it is scrutinized in the contract. The information about the changed attributes is now stored inside the model which removes the necessity to flag the whitelisted attribute separately. Additionally, the exact change is tracked. So if an attribute is set to one value inside a whitelisted block there is no risk in later on performing a mass assignment. This comes at the cost of extending the models which is weird also it is build into the default SetAttributesService so child classes do not have to worry. One might include the module into every AR model but currently we only need it for a very specific use case.	4 years ago
Markus Kahl	eebf873eb1	disable direct uploads when use_iam_profile is true (#9049 )	4 years ago
ulferts	37d75fbaec	bump version to 11.3.0	4 years ago
ulferts	9edf745085	Fix/group mention links (#9036 ) * turn group mentioning into link * add profile button to group edit page * Include built ckeditor Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
Oliver Günther	bbeae32698	[35508] Add global permission to manage placeholder users (#9000 ) * Add global permission to manage (but not delete) placeholders https://community.openproject.com/work_packages/35508 * Restore breadcrumbs for non-show routes * Remove permissions to memberships for add_placeholder_user permission * Allow non-admins with global permission to access membership * Remove permissions to memberships for add_placeholder_user permission * Rename shared_examples for admin contract validations Co-authored-by: ulferts <jens.ulferts@googlemail.com>	4 years ago
Oliver Günther	b8ba68421f	Bumped version to 11.1.5 [ci skip]	4 years ago
Oliver Günther	0c9fb9b1af	[36206] Make force_no_page for ldap configurable https://community.openproject.com/wp/36206	4 years ago
Wieland Lindenthal	a18954b2c9	Placeholder user services and administration (#8944 ) * Adding placeholder user contracts * Adding create, update, and delete services for placeholder users * WIP: Adding Placeholder User contract specs [ci skip] * Extract contract validation into common helper * Add common validation in BaseContract + common example for admin checks * Introduce common ModelContract shared context for validations * WIP: PlaceholderUser controller, i18n, and routes [ci skip] * Placeholder users index page and query - moved all group related scopes from User to Principal to make them also available in PlaceholderUser. * end * Create PlaceholderUser * Feature spec for editing a placeholder user * Manage PlaceholderUser memberships The managment of memberships is pretty similar for User and PlaceholderUser. This commit extacts the similarities and uses them for both. * General partial and show view for PlaceholderUser * Delete obosolete partial * Allow RequireAdminGuard to be used as a module function * Fix I18n for confirmation text * Smaller code improvements * Fix: Syntax for accessing status enums was wrong. * Use UpdateService for updating a placeholder user * Add spec for PlaceholderUsersController * First code improvements after code review. - more improvements to come. * Further code improvements after review ... still more to come * Correct namespace of delete service * Fix: Make placeholder user contract validate * Remove :type attribute from base contract of User and PlaceholerUser ...and add it to the CreateContracts. Also add type validations. Further extract shared examples for placeholder user attribute validation * Refactor: Extract membership hook calls to helper * Fix redirect paths for membership controllers * Specs already present in shared exampels. * Fix duplicates routes for users and placeholder users * Fix user path * Add attribute name and lastname We don't need a writeable check as both are equally writable * Replace more references to tab_edit_user_path * Skip specs for PlaceholderUsers::DeletionService We will tackle that service in a separate PR. * Fix module usage of RequireAdminGuard * Fix group filter for placeholder users * Fix invalid reference to expect_valid * Fix: Fix tabbed edit path for placeholder users * Fix status filtering on users * Linting * Improve generalisation of individual principal filter cell - Check for presence of groups and statuses in order to toggle visibility of their UI element. - Remove groups from placeholder user controller and cell initialization and options * Fix selector on groups assign * Remove using_shared_fixtures Co-authored-by: Oliver Günther <mail@oliverguenther.de>	4 years ago
ulferts	1bdd2ab9ae	safe automatic fixes by rubocop (#8994 )	4 years ago
ulferts	2eb58888af	Bumped version to 11.1.4 [ci skip]	4 years ago

1 2 3 4 5 ...

1381 Commits (033eb9e4730ca6b3657111de1cd448e0a2d4e011)