openproject

Commit Graph

Author	SHA1	Message	Date
Oliver Günther	af35670694	Make placeholder users EE (#9003 ) * Add global permission to manage (but not delete) placeholders https://community.openproject.com/work_packages/35508 * Show EE upsale and disable creation of placeholders without it * Review feedback	4 years ago
ulferts	1bdd2ab9ae	safe automatic fixes by rubocop (#8994 )	4 years ago
ulferts	5ea185ef66	Placeholder user project members (#8961 ) * remove intermediate placeholder scope Doing so, placeholder users will begin to show up in the system * remove scope without value * extract scope * use enum for status * allow placeholder users to become project members * display placeholder user member on members widget * remove now superfluous method The status name can simply be queried via #status now * replace possible_assignees/responsibles on project This also leads to placeholder users becoming eligible as assignees and responsibles. * fix aggregated scope on bulk edit * linting * remove IssueHelper	4 years ago
Oliver Günther	3c9be3bdbe	[35507] Allow global permission to add and edit users (#8937 ) * Add global permission for add_user * Rename fieldset for global roles to "Global" * Add permission to admin actions * Add index action to add_user permission * Redirect to first admin item if only one * Hide status action for non admins * Break down user form into partials for easier rendering * Disable some user form tabs for non-admins * Make users API and services conformant with endpoints * Fix references to DeleteService#deletion_allowed? * Authorize add_user on show as well * Only show invite user toolbar item with permission * Fix Delete Service spec * Fix the way user prefs are handled in service * Ensure session_id is treated as string This causes a cast error otherwise as it passes rack session locally * Fix service call on onboarding controller * Fix service call on users controller * Add delete spec for global user * Hide login attribute again when adding a new user * Render auth source correctly in simple form * Fix creating invited users through service The invitation requires the mail attribute to be present. Previously, there was a manual error added to the mail. As the errors are now determined by the contract + model, we now end up with all missing properties as errors. * Properly constraint attributes for non-admins * Add specs for global user * Start working on how to update password from UsersController that code is a mess... * Change permitted_params spec to include non-admin params * Fix create user service spec * Remove mail_notification param from users controller It's not part of the contract/params passed to user * Remove todos * Extend docs * Correct the way backlogs patches into the user settings * Remove superfluous UpdateUserService * Rewrite duplicated update service examples into common shared example * Remove duplicate password writable check * Base Users::DeleteContract on base delete contract * Move checks for active users into the UserAllowedService * Restore password writable check as it is not an attribute * Fix menus for global user * Allow global users to add custom fields * Allow global user add permission to reinvite user * Fix changed var name in update service spec * Ensure also invited or registered users can be authroized This ensure that e.g., invited users can also be set as watchers * fix typo Co-authored-by: ulferts <jens.ulferts@googlemail.com>	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925 ) Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
ulferts	3b0f7367fd	move to proper module	4 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
ulferts	4e5b9afef5	rename project attributes	5 years ago
ulferts	c83ba63640	Revert revert unwanted in dev branch This reverts commit `b05a8f7b54`. The release/10 branch received a revert that was applied after changes from dev unwillingly where merged into it. But when merging release/10.0 back into dev, that revert was also applied to dev where the changes are indeed wanted. So we revert the revert for dev.	5 years ago
Oliver Günther	b05a8f7b54	Revert "[31080] Trigger wpEvent after custom action"	5 years ago
ulferts	fdbcdc45bf	restrict wp_graph widget to be ee only	5 years ago
ulferts	e7263fcedb	migrate to rails 6.0.0	5 years ago
ulferts	5ee801b549	cache roles for project	5 years ago
ulferts	f1142c6654	move AccessControl into OpenProject namespace	6 years ago
Henriette Dinger	eb9a71994a	Allow EE token for board tests	6 years ago
Oliver Günther	3ba6913960	Implement read-only work package attributes based on status	6 years ago
Oliver Günther	d48f67688f	Also revert to none in backend, otherwise this will break specs	6 years ago
Jens Ulferts	8c6f4837cc	move costly respond_to to unlikely position	7 years ago
Wieland Lindenthal	643e945b85	- Remove configuration option for attachment search - Remove attachment search from global search as it is currently incompatible - Add rake task for indexing attachments that have not been indexed yet - Make the attachments filters a EE feature.	7 years ago
Wieland Lindenthal	f2ebad3915	WIP: attachment search	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171 ) [ci skip]	7 years ago
Jens Ulferts	b0fed3768d	turn into enterprise feature	7 years ago
Oliver Günther	d2109f499f	Add ldap groups to ee service [ci skip]	7 years ago
Oliver Günther	af80f09ec6	Add 2fa key to EE service [ci skip]	7 years ago
Wieland Lindenthal	2939edc9b0	Show all custom fields if you have an enterprise token	7 years ago
ulferts	4b76af2521	guard attribute help texts by ee token (#5786 ) The tokens are always queryable via the api but the administration requires an enterprise token to be set [ci skip]	7 years ago
ulferts	4d95cc815f	Feature/guarded relation columns (#5784 ) * refactor case statement * guard relation columns by enterprise token [ci skip]	7 years ago
Oliver Günther	f54992605a	Allow EnterpriseService to accept edit_attribute_groups [ci skip]	8 years ago
Markus Kahl	f5a57e3f42	list custom field normalisation and multi select	8 years ago
Wieland Lindenthal	6cd14ee7a5	Untangle logic. `ee_manager_visible` only effects visibility of banners advertising EE. It does not effect `allows_to?` checks on the token.	8 years ago
Wieland Lindenthal	c4a8320ed5	Fix: logic for `ee_manager_visible` is falsey `allows_to?` and `show_banners?` should behave differently if the configuration is set to false.	8 years ago
Oliver Günther	8b4964acc4	Fix more specs	8 years ago
Oliver Günther	f199e009ac	Rubocop	8 years ago
Wieland Lindenthal	49f12b3e21	Enterprise Edition support tokens	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Jens Ulferts	693090136d	normalize permissions With rails 5 it is no longer possible to create an sql like statement via arel which will check whether a serialized array contains a string. AR will only allow to create a match against an array if the column itself is marked to serialize an array. Because of this and in order to increase the normalization of the data, the permissions are no longer serialized and are moved into a separate table instead. While this is still not normalized, it satisfies the needs	8 years ago
Jens Ulferts	bf7343c312	replace perfectly sane hack for really dirty one	8 years ago
Jens Ulferts	acd58213e1	rewrite sql string in a arel based query	8 years ago
Jens Ulferts	8a8dfdd3de	move project allowed query to authorization	8 years ago
Jens Ulferts	1ddc142fd3	add sql based query to fetch all users being allowed an action	8 years ago
Jens Ulferts	06c6defa51	replaces ruby based permission check for allowed_to? with sql based query	8 years ago

40 Commits (0c2d87b4eb95e36b400a22b2c07c3720aeec4f0f)