232 Commits (3365224314a39473612b6141d31ba18a9679bfa9)

Author	SHA1	Message	Date
Hagen Schink	d514c66327	Ensure each action is called once	10 years ago
Hagen Schink	dc5cff4cbc	Recognize filter changes correctly	10 years ago
Hagen Schink	8225f0a25b	Test that 'update' policy is ignored	10 years ago
Hagen Schink	fe67f4ab56	Test that many policies are followed	10 years ago
Jens Ulferts	d7486ab811	allows api v2 types controller accessible for :view_work_packages permission	10 years ago
Hagen Schink	2165059b62	Test user with sufficient rights can depublicize query	10 years ago
Hagen Schink	2430995610	Test that user with sufficient rights can publicize query	10 years ago
Jens Ulferts	cd65f449dd	removes classes that should have been deleted in #4817547	10 years ago
Jens Ulferts	34712ffd8f	expect policy to be called in controller	10 years ago
Jens Ulferts	4817547d4a	introduces policies ... The pattern used here is taken from pundit although this here does by far not have the functionality pundit offers.	10 years ago
Jens Ulferts	61c05affd4	checks for permission before api/v2/types#index	10 years ago
Jens Ulferts	01d2569225	allows version selection for global filtering	10 years ago
Mihail Maxacov	a0631745de	fix saved queries don't update wp lists correctly when removing filters	10 years ago
Jens Ulferts	5c06dda316	users allowed new statuses no longer receive an edit menu entry ... They are not allowed to call the work_package#edit action anyway	10 years ago
Jens Ulferts	1513a19b84	readd experimental controllers and add authorization to them	10 years ago
Alex Coles	0b941955ce	Fully qualify ::Type class constant ... This fixes a naming collision with AR internals: undefined method `find' for ActiveRecord::AttributeMethods::Serialization::Type:Class Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Jens Ulferts	da721fd6d0	specs for json instead xml	10 years ago
Jens Ulferts	3c730ef131	enforces authorization for experimental api	10 years ago
Michael Frister	8d08e71ed5	API v2: Change boolean value to use true/false ... While this is not the OpenProject API, we use true/false for other APIs and for other parameters in the application, like `layout=false`. true/false also seems more intuitive.	10 years ago
Jens Ulferts	f91256fef9	remove no longer required experimental controller	10 years ago
Jens Ulferts	befb9f054e	removes unnecessary visibility filter on Version scope ... Authorization is handled an project level here and thus does not need to be done for the version itself. Authorising on the Version in addition has the drawback to only return versions in projects which the user can see work packages in. It does not take into account that the version can be shared.	10 years ago
Michael Frister	959c4ba405	API v2 PE index: Allow disabling parent rewiring ... Allow disabling rewiring - this exposes parent IDs of work packages invisible to the user. When requesting single work packages via IDs, the rewiring fails as it assumes that all visible work packages are loaded, which they might not be. For a work package with a parent visible to the user, but not included in the requested IDs, the parent_id would thus be nil. Disabling rewiring allows fetching work packages with their parent_ids even when the parents are not included in the list of requested work packages. There's also a case when rewiring is not used at all: When not providing a project id and requesting via /api/v2/planning_elements.json?ids=[...]. In this case parent_ids were and are always shown. This is pretty inconsistent, but that's the way API v2 is. Btw, planning_elements.json returns 404 when not giving an ids parameter. Apparently, the way custom fields are returned is also different between the general planning elements endpoint and the project-specific one. I didn't look into this, though.	10 years ago
Hagen Schink	32f0c4851e	Remove superfluous let statement	10 years ago
Hagen Schink	a4e07cfbce	Test version ids filter	10 years ago
Hagen Schink	eec14f6113	Remove show endpoint	10 years ago
Hagen Schink	e3506bcb14	Aggregate projects for shared versions	10 years ago
Hagen Schink	a250b0262e	Test projects references in shared versions	10 years ago
Hagen Schink	2b61ea9aff	Test handling of shared versions	10 years ago
Hagen Schink	812d889f81	Add specs for API v2 version show	10 years ago
Hagen Schink	ac7870f185	Add specs for API v2 version index	10 years ago
Hagen Schink	7a84d371f2	Use simple require for spec helper	10 years ago
Alex Coles	515c9dff5b	[wip] Add Versions List, Version API (v2) resource ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Hagen Schink	1a4f254015	Fix specs	10 years ago
Hagen Schink	46e4b5a061	Change to new RSpec syntax for some more statements	10 years ago
Hagen Schink	f6353003d9	Add specs	10 years ago
Ion Biziiac	6bd377176d	Add specs for Possible to see list of types without being logged in	10 years ago
Jens Ulferts	85bb7e58c6	only applies default filter if no query attribte is provided	10 years ago
Till Breuer	2c4483544c	Merge branch 'dev' into feature/adding-and-removing-watchers ... Conflicts: app/assets/javascripts/angular/work_packages/controllers/work-package-details-controller.js karma/tests/controllers/work-package-details-controller-test.js lib/api/v3/work_packages/work_package_representer.rb	10 years ago
Jens Ulferts	433f707843	only open wp on initial load of wp#index	10 years ago
Hagen Schink	63ace93877	Add specs	11 years ago
Alex Coles	789e13a479	Convert specs to RSpec 2.99.0 syntax with Transpec ... This conversion is done by Transpec 2.3.1 with the following command: transpec -f * 46 conversions from: it { should ... } to: it { is_expected.to ... } * 9 conversions from: obj.stub(:message) to: allow(obj).to receive(:message) * 1 conversion from: describe 'some controller' { } to: describe 'some controller', :type => :controller { } * 1 conversion from: describe 'some request' { } to: describe 'some request', :type => :request { } For more details: https://github.com/yujinakayama/transpec#supported-conversions	11 years ago
Alex Coles	e137ed8135	Convert specs to RSpec 2.99.0 syntax with Transpec ... This conversion is done by Transpec 2.3.1 with the following command: transpec * 72 conversions from: describe 'some controller' { } to: describe 'some controller', :type => :controller { } * 57 conversions from: describe 'some model' { } to: describe 'some model', :type => :model { } * 49 conversions from: describe 'some view' { } to: describe 'some view', :type => :view { } * 34 conversions from: obj.should to: expect(obj).to * 27 conversions from: describe 'some routing' { } to: describe 'some routing', :type => :routing { } * 8 conversions from: describe 'some feature' { } to: describe 'some feature', :type => :feature { } * 7 conversions from: describe 'some helper' { } to: describe 'some helper', :type => :helper { } * 5 conversions from: be_true to: be_truthy * 5 conversions from: describe 'some request' { } to: describe 'some request', :type => :request { } * 2 conversions from: obj.should_receive(:message) to: expect(obj).to receive(:message) * 2 conversions from: obj.stub(:message) to: allow(obj).to receive(:message) * 1 conversion from: before { example } to: before { |example| example } * 1 conversion from: describe 'some mailer' { } to: describe 'some mailer', :type => :mailer { } For more details: https://github.com/yujinakayama/transpec#supported-conversions	11 years ago
Richard	2072662b61	Fixed exp api work packages controller specs.	11 years ago
Hagen Schink	e2a89d77dd	Test that anonymous users can read public CFs	11 years ago
Hagen Schink	f035d3f213	Test custom fields of public projects are visible	11 years ago
Hagen Schink	d6d6374257	Fix let layout	11 years ago
Hagen Schink	06f92ccfd6	Test duplicate handling	11 years ago
Hagen Schink	b2da7d3878	Test WP custom fields visible for all are handled	11 years ago
Hagen Schink	97ac24f647	Test admins can see all custom fields	11 years ago
Hagen Schink	579d009239	Test custom fields are filtered by membership	11 years ago