3841 Commits (61357f50918fb20e841b04788f96a2b49d0e8df0)

Author	SHA1	Message	Date
Oliver Günther	3cbc4e71b8	Disable CSRF for add-in ... The TaskConnector add-in doesn't handle CSRF tokens.	9 years ago
Oliver Günther	caa07c5dd4	Initiate omniauth request with relative root url awereness	9 years ago
Henriette Dinger	0f00d0452c	Add flash message for successfull deletion	9 years ago
Oliver Günther	fb4bf739d9	Allow the configuration to disable APIv2 basic auth	9 years ago
Oliver Günther	82eb512450	Make session name configurable	9 years ago
Oliver Günther	c7e410ef11	Warn users when OP cookie is missing ... When a user has disabled cookies, trying to log in to the application will result in a 422 error due to CSRF validation trying to use the session in Rails 4+. This commit introduces a separate warning when the OpenProject cookie was not found, which should always be present after the first request to the application.	9 years ago
Oliver Günther	34893071e1	Format dates according to the user's timezone ... By default, the date headlines of activities will be output with UTC+0, which may pose a problem when work in different timezones.	9 years ago
Henriette Dinger	595e25a346	Add missing flash messages	9 years ago
Oliver Günther	8b0cd01d9c	Use back_url for bulk move, copy, and edit ... This sets the back_url to wherever the bulk request originated from, allowing users to be redirected to their old work package, query, or table. Note that this does not simply work for bulk destroy, since users may use that functionality from split/full view and will in this case be redirected to a non-existing resource. We might pass a query_id in this case (to at least redirect back to queries), however it would be better if the frontend decided what path the user should be redirected to in this case.	9 years ago
Markus Kahl	b83d76fe35	show proper error on failure instead of 500	9 years ago
Markus Kahl	a9382e8802	resend invitation feature	9 years ago
Oliver Günther	a801a5c403	Unescape titles coming from route params	9 years ago
Henriette Dinger	dcb434bfbd	Unified the use of 'lock' and 'delete' for cost types	9 years ago
Jens Ulferts	d61cae99dd	rewrite method for clarity	9 years ago
Jens Ulferts	2dfcd12abf	improves performance of work package autocompleter ... * add db hint on mysql to use primary key for the ORDER BY * restrict the fiels to search on based on the character of the search query. e.g. if there are alphabet characters in the search query, we don't have to search on the id column	9 years ago
Oliver Günther	5cd5040e9e	Fix invalid params on category edit ... The edit route wrongly assigned parameters to the category, although it should only render the edit form. This only became apparent when strong params where requiring the `:category` param hash.	9 years ago
Jens Ulferts	be21a7a504	update error message for bulk operations across multiple projects	9 years ago
Markus Kahl	7f88ba5b22	removed attachments#show; only #download remains	9 years ago
Jens Ulferts	8c506b6f6e	remove redundant security check ... One might be able to constantize arbitrary objects (those that exist) but the checks after the constantize are very strict. They will only allow the find method to be called on objects inheriting from Acts::As::Watchable. The only parameter that is allowed for the method is an integer.	9 years ago
Stefan Botzenhart	e7490c1988	Fix copy project ... After switching to strong parameters mass assignment for project params is not supposed to work without permitting params. We now pass a normal hash instead of a ActionController::Params hash. Otherwise we get an ActiveModel::ForbiddenAttributesError All errors on the job are being rescued and logged to a separate file. Normally rescueing all errors on Exception is not something you want to do but as the job has an ensure block you won't know about any failures.	9 years ago
Stefan Botzenhart	1f53f5472e	Code style enhancements to fight against bad scoring	9 years ago
Markus Kahl	c256cfbb46	fixed documents/new by not requiring optional params	9 years ago
Jens Ulferts	6750ecfdc3	remove no longer required concern	9 years ago
Jens Ulferts	b0e80e3448	streamline work_packages_controller ... because of the reduced actions, the complexity of the controller as well as in the tests can now be reduced	9 years ago
Jens Ulferts	eec7a844bc	remove remains of no longer existing actions	9 years ago
Jens Ulferts	4f43470f7b	403/redirect on work package not existing/not visible	9 years ago
Jens Ulferts	acf2cfcf11	use correct AR method to reverse ... This is the same as in 03a3460	9 years ago
Markus Kahl	0abc54d5ab	don't fail invitation on long email addresses	9 years ago
Markus Kahl	4bc8365075	don't fail invitation on long email addresses	9 years ago
Markus Kahl	5324b2cc07	drop my first_login; redirect to work packages if possible	9 years ago
Oliver Günther	f508d81655	Restore journals for atom access	9 years ago
Oliver Günther	b64ef39986	Remove relations	9 years ago
Oliver Günther	69fae7bc54	Remove other remnants	9 years ago
Oliver Günther	eb888b7d2e	Remove views and actions	9 years ago
Jens Ulferts	d364d7d418	indentation	9 years ago
Jens Ulferts	8868b3d741	reremove line accidentally readded by merge dc3337a	9 years ago
Jens Ulferts	03a3460ba2	use AR method to reverse ... reverse! is not defined on an ActiveRecord AssociationProxy. This used to work when an array was still returned	9 years ago
Oliver Günther	32da16e979	Avoid internal error when project not found	9 years ago
Oliver Günther	135e7b4dfc	Use Core PermittedParams to add new strong_param key	9 years ago
Jonas Heinrich	54bccf70f8	Rename Settings to System Settings	9 years ago
Mohamed Wael Khobalatte	80192f6986	Do away with eval ... Eval is unnecessary here. Sure the code has slighly more duplication, but no where near enough to warrant an eval.	9 years ago
Mohamed Wael Khobalatte	c9b46dfd15	Ensure save and delete routes are working properly	9 years ago
Mohamed Wael Khobalatte	e2d0172353	Move add budget to toolbar	9 years ago
Mohamed Wael Khobalatte	391ad369a0	Add id to params to allow proper updates	9 years ago
Mohamed Wael Khobalatte	a11b57ea39	Resolve cucumber issues with whitelisted attributes	9 years ago
Mohamed Wael Khobalatte	9b4e0065a7	Fix issues with using attributes= in non-controller code ... This caused a ForbiddenAttribute all over the place, in addition to other related errors.	9 years ago
Mohamed Wael Khobalatte	3c7b8f5010	Ensure we actually mutate params when processing them ... Before, we were processing start_date in meetings params, but on a different hash, so we lose the work we did.	9 years ago
Mohamed Wael Khobalatte	2f10c30828	Add support for strong params	9 years ago
Stefan Botzenhart	a30a2c83f0	Fix rubocop issues	9 years ago
Stefan Botzenhart	463a115d6c	Fix rubocop issues	9 years ago