447 Commits (45c92900aff39a8fc12a26a6c198a29f86dae489)

Author	SHA1	Message	Date
Michael Frister	b1a7ef96fa	Remove useless db:migrate:plugins rake task	12 years ago
Christian Rijke	46812b4010	Fix namespacing of generated urls and use named routes where possible.	12 years ago
Sebastian Schuster	2b04d0a07d	Removed unused mass assignment whitelisting and corresponding specs	12 years ago
Sebastian Schuster	47b4f7afda	Added preview actions at appropriate place and actions for updating labor and material items including strong parameters permission for assigning nested attributed	12 years ago
Sebastian Schuster	c71176f986	Added copy action for copying cost_objects	12 years ago
Christian Rijke	1a4f2239fc	Initialize observer in engine.rb instead of patch file.	12 years ago
Jens Ulferts	e3af09af05	changes saving without validation to rails3	12 years ago
Jens Ulferts	1992e34ee5	adapts i18n to changed core ... I should have spotted most of the translations missing after the core changed it's i18n behaviour. I was however hesitant to delete old translations as I fear that there would be a lot of missing transltions in openproject_reportings if I did.	12 years ago
Jens Ulferts	7c9836fc3e	fix permissions for hourly rates broken by splitting up edit	12 years ago
Jens Ulferts	c30b2649a3	fixes strong_params for cost_types nexted attributes	12 years ago
Jens Ulferts	43ae7c4011	loads number_helper patch	12 years ago
Christian Rijke	5f6f8d804b	Fix before_save callback.	12 years ago
Christian Rijke	191f2e3818	Register observers during engine initialization.	12 years ago
Sebastian Schuster	58fab0dea4	Removed attr_accessible for cost models and replaced with strong parameters ... style permitting of mass assignments, added specs for testing the assignment	12 years ago
Sebastian Schuster	02f4fc3dbc	Added asset precompilation to engine.rb	12 years ago
Sebastian Schuster	869c4a3c15	Renamed all references of redmine_costs to openproject_costs	12 years ago
Jens Ulferts	43a417e269	project reference is no longer needed	12 years ago
Jens Ulferts	c2df71949f	helper is html_safe	12 years ago
Jens Ulferts	c9d38b872d	have timelog index work without openproject_reports ... Need to check whether the patch has to move to openproject_reports alltogether	12 years ago
Jens Ulferts	d4a9dcc891	adds overwriting views of issue	12 years ago
Jens Ulferts	6108192484	adds missing permissions for editing cost_objects	12 years ago
Jens Ulferts	2b718f51b1	adds plugin to test path	12 years ago
Jens Ulferts	e48a1b8dec	renames costlog details to index	12 years ago
Jens Ulferts	9fbcb42934	protects cost_entry with strong_parameters	12 years ago
Jens Ulferts	3d30404a74	rewrites routes to rails3 compliant resource style	12 years ago
Jens Ulferts	1ed473f5a9	adds settings in a hacky way ... We still have to figure out how to do this cleaner	12 years ago
Jens Ulferts	a74868a682	removes method call to formerly alias_message_chained method	12 years ago
Jens Ulferts	d9497e6752	loads costs factories	12 years ago
Jens Ulferts	f948c27a9b	correctly references DeletedUserFallback module	12 years ago
Jens Ulferts	a5f8942444	prevents duplicate loading of plugin, adapts autoload path	12 years ago
Jens Ulferts	f20eb79be1	initial creation of gemspec and engine, conformant lib directory structure	12 years ago
Jens Ulferts	2b19ce053f	removes custom spent_time handling introduces in 2bfc151 and f9a3112 ... As visible now only returns the time_entries visible to the user (depending on the user having :view_time_entries or :view_own_time_entries) we can simply use this method again	12 years ago
Jens Ulferts	f9a31123cd	fixes spent_time calcuations if user only has the view_own_time_entries ... permission This also introduces a granular option into the allowed_to_with_inheritance method. This is required to prevent the bubbling up of permissions (:view_own_time_entries -> :view_time_entries). By default, bubbling up is active. Bubbling up (granular) lead to the user having the view_time_entries permission when only querying for the view_own_time_entries.	12 years ago
Jens Ulferts	2bfc15135a	replaces inefficient visible scope by a less inefficient implementation in ruby	12 years ago
Jens Ulferts	d2c281cb4a	displays spent time on projects overview if user has view_own_time_entries permission	12 years ago
Jens Ulferts	84e89f0b90	completely removes custom allowance evaluation (granular_for, inheritance) ... This should make the code easier to understand and more performant. As part of this commit a lot of falsely presented information is no longer shown to users who have limited rights. E.g. a user having only the view_own_hourly rates sees only the planned and actual labor costs for himself when viewing a budget.	12 years ago
Jens Ulferts	750a321889	whitespace and commented out code removal	12 years ago
Jens Ulferts	0856d07a9e	prevents non existent permission to always be allowed	12 years ago
Jens Ulferts	c753aca06a	caches allowed_to on access control	12 years ago
Jens Ulferts	e9b2f5d02e	caches allowed_to for roles	12 years ago
Jens Ulferts	5a4da6d962	remove commented out code	12 years ago
Jens Ulferts	8f2cb9bcec	prevents exponential calls when having a permission that has a ... granular_for permission * moves check for granular permissions directly into allowed_to	12 years ago
Gregor Schmidt	e510f814a7	Removing incomplete patches to group/membership models ... The underlying concept was never fully implemented and activated. Removing dead code to avoid confusion and potential errors.	12 years ago
Jens Ulferts	46472d225f	fixes adding users to projects by adding them to a group	12 years ago
Jens Ulferts	fa58841f84	check allowed to in projects (Array) index if project context does not exist	12 years ago
Jens Ulferts	1ec84d6cc7	refactoring rate querying to no longer be dependent on the existence of a user ... * so that it can handle deleted users	13 years ago
Jens Ulferts	b69d6dca86	have a deleted_user_fallback mixin and cost_entry, labor_budget_item and rate using it ... * deleted_user_fallback will return the deleted user upon asking for user when the user_id of the including model points to a user who no longer exists	13 years ago
Martin Linkhorst	928720f6b6	more protection against mass assignment	13 years ago
Jens Ulferts	66e3adea93	taking the user provided by :for option if available	13 years ago
Jens Ulferts	bb0e066944	remove dead code ... * membership_type never returned a symbol	13 years ago