431 Commits (705de29ed7b8bb50c99a8315252cd51338834b35)

Author	SHA1	Message	Date
Jens Ulferts	43a417e269	project reference is no longer needed	12 years ago
Jens Ulferts	c2df71949f	helper is html_safe	12 years ago
Jens Ulferts	c9d38b872d	have timelog index work without openproject_reports ... Need to check whether the patch has to move to openproject_reports alltogether	12 years ago
Jens Ulferts	d4a9dcc891	adds overwriting views of issue	12 years ago
Jens Ulferts	6108192484	adds missing permissions for editing cost_objects	12 years ago
Jens Ulferts	2b718f51b1	adds plugin to test path	12 years ago
Jens Ulferts	e48a1b8dec	renames costlog details to index	12 years ago
Jens Ulferts	9fbcb42934	protects cost_entry with strong_parameters	12 years ago
Jens Ulferts	3d30404a74	rewrites routes to rails3 compliant resource style	12 years ago
Jens Ulferts	1ed473f5a9	adds settings in a hacky way ... We still have to figure out how to do this cleaner	12 years ago
Jens Ulferts	a74868a682	removes method call to formerly alias_message_chained method	12 years ago
Jens Ulferts	d9497e6752	loads costs factories	12 years ago
Jens Ulferts	f948c27a9b	correctly references DeletedUserFallback module	12 years ago
Jens Ulferts	a5f8942444	prevents duplicate loading of plugin, adapts autoload path	12 years ago
Jens Ulferts	f20eb79be1	initial creation of gemspec and engine, conformant lib directory structure	12 years ago
Jens Ulferts	2b19ce053f	removes custom spent_time handling introduces in 2bfc151 and f9a3112 ... As visible now only returns the time_entries visible to the user (depending on the user having :view_time_entries or :view_own_time_entries) we can simply use this method again	12 years ago
Jens Ulferts	f9a31123cd	fixes spent_time calcuations if user only has the view_own_time_entries ... permission This also introduces a granular option into the allowed_to_with_inheritance method. This is required to prevent the bubbling up of permissions (:view_own_time_entries -> :view_time_entries). By default, bubbling up is active. Bubbling up (granular) lead to the user having the view_time_entries permission when only querying for the view_own_time_entries.	12 years ago
Jens Ulferts	2bfc15135a	replaces inefficient visible scope by a less inefficient implementation in ruby	12 years ago
Jens Ulferts	d2c281cb4a	displays spent time on projects overview if user has view_own_time_entries permission	12 years ago
Jens Ulferts	84e89f0b90	completely removes custom allowance evaluation (granular_for, inheritance) ... This should make the code easier to understand and more performant. As part of this commit a lot of falsely presented information is no longer shown to users who have limited rights. E.g. a user having only the view_own_hourly rates sees only the planned and actual labor costs for himself when viewing a budget.	12 years ago
Jens Ulferts	750a321889	whitespace and commented out code removal	12 years ago
Jens Ulferts	0856d07a9e	prevents non existent permission to always be allowed	12 years ago
Jens Ulferts	c753aca06a	caches allowed_to on access control	12 years ago
Jens Ulferts	e9b2f5d02e	caches allowed_to for roles	12 years ago
Jens Ulferts	5a4da6d962	remove commented out code	12 years ago
Jens Ulferts	8f2cb9bcec	prevents exponential calls when having a permission that has a ... granular_for permission * moves check for granular permissions directly into allowed_to	12 years ago
Gregor Schmidt	e510f814a7	Removing incomplete patches to group/membership models ... The underlying concept was never fully implemented and activated. Removing dead code to avoid confusion and potential errors.	12 years ago
Jens Ulferts	46472d225f	fixes adding users to projects by adding them to a group	12 years ago
Jens Ulferts	fa58841f84	check allowed to in projects (Array) index if project context does not exist	12 years ago
Jens Ulferts	1ec84d6cc7	refactoring rate querying to no longer be dependent on the existence of a user ... * so that it can handle deleted users	13 years ago
Jens Ulferts	b69d6dca86	have a deleted_user_fallback mixin and cost_entry, labor_budget_item and rate using it ... * deleted_user_fallback will return the deleted user upon asking for user when the user_id of the including model points to a user who no longer exists	13 years ago
Martin Linkhorst	928720f6b6	more protection against mass assignment	13 years ago
Jens Ulferts	66e3adea93	taking the user provided by :for option if available	13 years ago
Jens Ulferts	bb0e066944	remove dead code ... * membership_type never returned a symbol	13 years ago
Jens Ulferts	7a3f52f34c	rewritten allowed_to? modification to be compatible with new core implementation ... * defining our own AllowanceEvaluator * no longer overwriting allowed_to * adding tests for changed allowed_to? decisions	13 years ago
Romano Licker	34d11a33fa	adding a new journal formatter that handles the cost association ... on issues registering cost_object_id	13 years ago
Gregor Schmidt	36fb75b942	Redmine::AccessControl.permission might return nil ... Don't know why it does and why this suddenly occurs, but this change should not be harmful.	13 years ago
jwollert	7304bed380	small bugfix concerning TimeEntry bulk update	13 years ago
jwollert	94eef78aa9	adds real_value to CostQueryColumns to get rid of having to handle nasty currency strings	13 years ago
Tim Felgentreff	f69a6edd90	Fix super-call in redirect_to override	13 years ago
Gregor Schmidt	f07eafc6d8	Moving tasks to lib folder, removing strange looking task which is probably outdated anyway ... Sorry, if I got anything wrong here.	13 years ago
Tim Felgentreff	4fe8ebd62e	#4424 redirecting onto a show action would reset the report. prevent that	13 years ago
Tim Felgentreff	9e5ca03427	Adjust costlog and timelog controllers for engine with widgets. The session query is on a different key, now.	14 years ago
Gregor Schmidt	d5a52d3144	Adding FIXME - this one will hurt, if you're member in loads of projects	14 years ago
Wieland Lindenthal	24d58f4ee7	Removing "Costs" from sidebar as it does not list any reports yet.	14 years ago
Jens Ulferts	c38c1c13e5	constraint on cost_object_id as safe attribute loosened	14 years ago
Jens Ulferts	3498e669e7	adding cost_object_id to safe issue attributes	14 years ago
Stephan Eckardt	409e6c1e96	fix /time_entries in chiliproject	14 years ago
Tim Felgentreff	88eaa73d77	#3964 fix overwritten method	14 years ago
Stephan Eckardt	467ee00f10	added version switch for aliasing of "details" in timelog controller	14 years ago