1147 Commits (1f45cd3ba1bc95b2a86fdf871ff091c5a2179018)

Author	SHA1	Message	Date
Jens Ulferts	b32b88d6dc	no longer loads priority and workflow as the edit form is no longer rendered directly	12 years ago
Jens Ulferts	857dd7c4d2	uses ajaxAppend for loading the issue#edit form ... This means that it is no longer necessary to render the edit form on every show request which will significantely increase the load speed of the page. We will have to see if it is ok for the user to have to wait for the form to load once he actually wishes to edit the issue.	12 years ago
Jens Ulferts	f135d4cfbe	eager loads assigned to on ancestors/descendants	12 years ago
Jens Ulferts	8f3aee5d4d	eager load objects associated with the changeset	12 years ago
Jens Ulferts	9b8cad4395	eager loads objects associated to issue	12 years ago
Jens Ulferts	2c22694e98	eager loads objects associated to the issue's relations	12 years ago
Jens Ulferts	3a8753d1b5	eager loads models associated with the issues ancestors and descendants ... Additionally it fixes the bug that all issues of the tree would be displayed even when the user didn't have the right to view them. This would be the case when the user has rights in Project A but non in Project B. Viewing an issue in Project A having ancestors/descendants in Project B would show those erroneously. Saves about 1.5 seconds when having 100 ancestors/desendants.	12 years ago
Jens Ulferts	d5daa90937	prevents exploiting implicit mysql typecasting ... This should prevent an attacker from issuing a request where he sends a token param casted to integer. MySql would cast the value attribute of Token to integer which is either the integer at the beginning of the value or, in absence of such, 0.	12 years ago
Jens Ulferts	1ee8a47cfd	removes "updated by" information and back link on xhr journal diff requests ... * renders a partial without the mentioned elements * when using standard request the information is still presented. This enables opening the diff in a new tab/window.	12 years ago
Eric Davis	84fc92ac92	Add JournalsController#diff to diff a single field	12 years ago
Martin Linkhorst	2d3b20d905	define the default sort order at a single place	12 years ago
Gregor Schmidt	c94c0789bb	Async loading of project list in project jump box ... * Adding special URL endpoint to get all visible projects at once (w/o paging - as in /projects/index.json) * Adding openProject JS object to carry useful information and helper methods for JS land * Adding helper method to User to get the number of visible projects w/o loading all of them * Reducing dependency to DOM structure of select2 - using API access instead * Close menu when select2 list is closed	12 years ago
Gregor Schmidt	2379936cd8	Using flash.now instead of flash ... Since the text will be rendered immediately, we should use flash.now instead of flash. This way the message will not be stored in the session and emitted again with the next request.	12 years ago
Gregor Schmidt	237c0c9a50	Making i18n-js work for OpenProject ... * Limit i18n keys in JS to the 'js' scope to reduce payload * Update i18n gem to make i18n-js work with limited scopes * Exporting translations on server start and not on every request to save computing resources and avoid impact on response times * Configuring i18n-js to use the same fallbacks like the ruby part to ensure consistent behavior across languages * Removing rake tasks from Rakefile since (a) they do not belong there - should have been in lib/tasks - and (b) they are no longer needed, since the export happens at server start NB: public/javascripts/i18n needs to be writeable by the app server user.	12 years ago
Gregor Schmidt	eeb052280f	Load user memberships by default ... since nearly every view will check permissions, eager loading memberships might be a good idea.	12 years ago
Jens Ulferts	668d6ba1b8	increases robustness of menu item selection for wiki controller ... * when the user is not allowed or no menu item exists for the page we just return nil	12 years ago
Romano Licker	04541cc662	add before filter in order for the authentication to work ... corresponding tests can be found in chiliproject_tests plugin	12 years ago
Jens Ulferts	d02ebfde84	selects the currently edited menu entry in the main menu	12 years ago
Jens Ulferts	ce9b860b3f	explicitly defines the selected menu items for the wiki controller ... * index, new_child and the rest is handled separately * index and new_child are now scoped (by their symbol) under the wiki_menu_entry, so that the correct index/new_child page is selected. The symbols are still somewhat magical. * implements a method to add a dynamically evaluated method to determine the currently selected menu item	12 years ago
Romano Licker	936f0bbdcb	refactoring wiki hierarchy breadcrumb	12 years ago
Romano Licker	9cc7eafc15	integrate wiki_menu_items into wiki-module and ... menu manager - rename wiki_tabs table if exists	12 years ago
Romano Licker	7c8ac464cd	introduce wiki menu items ... this model replaces the chiliproject_wikitabs - plugin and extends its functionality	12 years ago
Romano Licker	2f772159a9	add default controller actions and build "create child page link" ... the code was largely taken from the 'chiliproject_wikitabs'	12 years ago
Felix Schäfer	84e4701d8b	Copy watchers when copying an issue	12 years ago
jwollert	4511a4e83d	adds i18n-js gem providing us with easier access to translations in js	12 years ago
Martin Linkhorst	163c95d8a3	fixes 42586 - parameters are pretty messed up here :(	12 years ago
Jens Ulferts	c02b3b9fd8	refactors responses from members_controller#new to have less view in the controller	12 years ago
Romano Licker	d0723e3094	add a notification when successfully adding a member	12 years ago
Romano Licker	89cc1d6c48	remember page on all actions on settings/members ... "stay where you are" shouldnt confuse the user too much	12 years ago
Romano Licker	dab812dc69	remove visual effect for new members ... we cannot guarantee that the new member will be on the current page using pagination since we can add multiple members with one click we can never guarantee that without breaking the order	12 years ago
Romano Licker	b68fef1e7a	refactor autocomplete notification and move it to core ... former "chiliproject_members_autocompleter"-plugin	12 years ago
Jens Ulferts	ff94754926	makes User#destroy part of the api	12 years ago
Jens Ulferts	f65190afd0	uses openproject header for api requests ... * instead of ChiliProject	12 years ago
Jens Ulferts	ad5f3095a6	check for having global permission to export_issues if no project is provided ... * optimizing project retreival	12 years ago
Jens Ulferts	f0ebe9f0b9	adding settings to control user deletion ... * slit up into admin allowed to delete user accounts and users allowed delete their own account	13 years ago
Jens Ulferts	7881d740de	explicitly using base layout for my#index action, using alias to mark #page as such	13 years ago
Jens Ulferts	58735b8f4b	enable admins to delete other users	13 years ago
Jens Ulferts	87f666cb79	no longer using deprecated send_* method of delayed_job	13 years ago
Jens Ulferts	5e13836c17	have destroying user executed as a background task ... * using delayed_job as the gem for that * this could also be used for other background-jobs that are currently implemented using cron	13 years ago
Jens Ulferts	db5a758b6d	adding a delete account link to the "my account" menu ... * before the deletion, the user is presented a view with the consequences of deleting his account * deleted users are logged out	13 years ago
Martin Linkhorst	9bad9f5869	merge list sums plugin into the core	13 years ago
Jens Ulferts	128462bdee	setting breadcrumb for timelog_controller	13 years ago
Jens Ulferts	47454dd7e5	making successful saving a condition for a success response on member edit	13 years ago
Romano Licker	d9069356e1	display errors correctly when adding a member to a project ... - when nothing is selected - when a user is missing - when a role is missing	13 years ago
Romano Licker	01f8886a63	fixes: couldn't switch roles on a user & ensure correct ... error handling the remove_member_if_empty callback was executed deleting the member entirely it should not be possible to remove all roles from a member thus we can remove the callback for good the ui now prevents the user from setting no role (raises an error) if he wants to delete a member he can use the delete button which is much more intuitive.	13 years ago
Jens Ulferts	3511600c0a	adjust members_controller to work with the protected attributes ... * member received autosave option so that changes can be saved in a single transaction	13 years ago
Romano Licker	eaba2414cf	add label "Move issue" for breadcrumb	13 years ago
Martin Linkhorst	fa26c9ceee	remove login explicitly from attributes hash since it is protected	13 years ago
Jean-Philippe Lang	a6a95c8617	Prevent mass-assignment vulnerability when adding/updating a wiki (#922).	13 years ago
Jean-Philippe Lang	5c6fbc664b	Prevent mass-assignment vulnerability when adding/updating a version (#922).	13 years ago