1853 Commits (7ff49d4bbd7e5e69903d3482429bfb85cedd569b)

Author	SHA1	Message	Date
Nils Kenneweg	78c1bd075c	rename X-ACCEPT-AUTH=X-Authentication-Scheme, test	12 years ago
Nils Kenneweg	05003493e2	added reason to api.	12 years ago
Nils Kenneweg	22664cb7c9	401 standard conformity	12 years ago
Michael Frister	f884fbf4c2	Add option to prevent former passwords from being reused ... Squashed from single commits: * Add checks to prevent former passwords from being reused * Make number of banned former passwords configurable Also group settings into fieldsets on the authentication settings page. * Update TestUnit fixtures with UserPasswords * Add migration for creating user passwords * Fix new user password not being immediately used * Add cuke for ban of former passwords * Fix admin info showing whether admin password was changed * Fix password check for user without password and fix tests * Fix password complexity feature after translation changes * Adapt my_controller_spec to UserPasswords * Order UserPasswords by id created_at is not unique within one second, this breaks MySQL tests. id is guaranteed to be unique and monotonically increasing on MySQL and on Postgres(at least as long cache is not set for the sequence). * Rename secure_compare to secure_equals? * Immediately use reduced number of banned former passwords Only check number of former passwords as defined in settings. The number of stored passwords per user is only reduced when a user updates the password. * Add missing copyright notices * Update changelog	12 years ago
Sebastian Schuster	a5993cf2d3	Used page helper instead of reading param directly	12 years ago
Sebastian Schuster	423152fa06	Fixed the uninitialized constant exception ... caused by the user class being loaded first in a pure core configuration in development	12 years ago
Christian Ratz	1298b0f7f4	more reliable session lifetime ... - allow only integer value for session ttl - disable session lifetime for ttl < 5 min - added hint to settings	12 years ago
Christian Ratz	f06e6f9ed7	[opf1054] Implements configurable session_lifetime ... - added locales also for the settings	12 years ago
Sebastian Schuster	6d8eb89d53	Removed function to preload circular dependencies ... since it is not always running first to load the dependencies (see Bundler.require in application.rb), therefore explicitely requiring the dependencies in the files loads classes in the correct order no matter which is loaded first	12 years ago
jwollert	3035192bb5	fixes membership creation for a single user	12 years ago
jwollert	5f3d586612	fixes issue with mass_assignment protection and role_ids	12 years ago
jwollert	13037de4db	fix id seperation used inside autocompletion for impaired users	12 years ago
jwollert	e446f783b0	Fixes Members Creation: ... The Select2 queries return comma-seperated elements that we need to handle individually. The way we seperate those elements was broken, resulting in a failing test.	12 years ago
jwollert	a678f916f9	fixes partial name for html request in memberscontroller's autocompletion	12 years ago
jwollert	1c1a464f96	port to rails3 ... Conflicts: Gemfile.lock	12 years ago
jwollert	a3e01cede1	get multiple remote selection to work properly	12 years ago
jwollert	d783dc46b5	autocompletion for roles and members in project settings, now with infinite scrolling ... Conflicts: Rakefile app/controllers/members_controller.rb app/models/principal.rb app/models/role.rb app/views/layouts/base.rhtml app/views/members/_new_member_form.rhtml public/javascripts/members_select_boxes.js public/stylesheets/select2_customizing.css Conflicts: app/views/layouts/base.rhtml public/javascripts/members_select_boxes.js don't need to mark members form as 'new'. everyone will see cause it's awesome Conflicts: app/views/projects/settings/_members.rhtml Conflicts: app/views/members/_new_member_form.rhtml Conflicts: app/views/projects/settings/_members.rhtml Conflicts: app/views/members/_member_form_non_impaired.rhtml app/views/projects/settings/_members.rhtml Conflicts: app/controllers/members_controller.rb app/views/layouts/base.rhtml app/views/members/_autocomplete_for_member.rhtml app/views/members/_member_form_impaired.rhtml Conflicts: app/controllers/members_controller.rb app/views/layouts/base.rhtml public/javascripts/application.js Conflicts: app/assets/images/suche_lupe.png app/controllers/members_controller.rb app/views/members/_autocomplete_for_member.rhtml app/views/projects/settings/_members.rhtml public/images/search_magnifier.png public/images/suche_lupe.png public/stylesheets/application.css public/stylesheets/select2_customizing.css Conflicts: config/locales/de.yml config/locales/en.yml	12 years ago
jwollert	26bff02cc7	starting on infinite scrolling of select2 inside members form. member itself might be working, roles are definitely not ... Conflicts: app/controllers/members_controller.rb app/models/principal.rb Conflicts: app/controllers/members_controller.rb removes deprecated test for autocompletion Conflicts: Gemfile app/views/members/_new_member_form.rhtml public/javascripts/members_select_boxes.js Conflicts: Gemfile Conflicts: Gemfile test/functional/members_controller_test.rb	12 years ago
Nils Kenneweg	c3de2dd008	updated pagination api to v2.	12 years ago
Michael Frister	85eeaa0a3b	Fix username not being shown on my/password page ... Also add test for username on forced password change form.	12 years ago
Michael Frister	c75820a3e1	Don't force password change after using lost password ... Fixes: * don't redirect after login * show login name on my/password page	12 years ago
Hagen Schink	23d554b7d8	Fix mass assignment error	12 years ago
Hagen Schink	7f7a0114ea	Fix tests	12 years ago
Michael Frister	7ba90102a7	Add option to force a user to change password on next login ... * Add force_password_reset field to user * Add force_password_reset field to user edit form Also, reindent the form HTML. * Rename force_password_reset to force_password_change * Force password change: Show form on login, allow change * Remove unused step definitions for setting RAILS_ENV * Fix forced password change, add cuke * Don't reveal whether user exists when not authenticated * Also add spec for testing reaction when user is not allowed to change the password. * Improve force password change code after review * Fix MyController password test and change to spec * Fix AccountController force password change spec	12 years ago
Jens Ulferts	2041c96588	fixes enumeration creation	12 years ago
Michael Frister	607c6a680d	Revert "if we are loged out and do ajax, we can redirect to login page." ... This change results in a JavaScript dialog, which breaks cucumber tests. This reverts commit b3262028db.	12 years ago
Hagen Schink	a6f83f1d3c	Adapt references to work package	12 years ago
Hagen Schink	05f2f300fc	Introduce work unit permissions	12 years ago
Martin Czuchra	18a19ed46b	Removes remaining html responses.	12 years ago
Hagen Schink	2c2c1f8a3e	Handle different change column names	12 years ago
Hagen Schink	8baacde427	Fix tests	12 years ago
Hagen Schink	82d2400cf0	Let issues work via STI	12 years ago
Sebastian Schuster	e1f9b0ec15	Fixed missing translation for journal log description diff	12 years ago
Martin Czuchra	e0fb8460f4	Reduces code duplication in ApiControllers. ... Methods for controller name changes in before filters (for permission checks) now generated dynamically, class methods moved to their own module.	12 years ago
Martin Czuchra	58be913471	Includes Api::V2::ApiController include. ... AuthenticationController and PlanningElementStatusesController were missing the ApiController include.	12 years ago
Martin Czuchra	8ed947e2e8	Disables API on reported project status controller.	12 years ago
Martin Czuchra	ab78885d30	Disables API on project associations controller.	12 years ago
Martin Czuchra	11516673fa	Disables API on planning element type colors controller.	12 years ago
Martin Czuchra	754178ffd8	Disables API on planning element statuses controller.	12 years ago
Martin Czuchra	0de9151b77	Disables API on planning element journals controller.	12 years ago
Martin Czuchra	04c1d5e230	Disables API on authentication controller.	12 years ago
Martin Czuchra	554ee6d635	Disables API on project types controller.	12 years ago
Martin Czuchra	416f1431ec	Disables API on planning element types controller.	12 years ago
Martin Czuchra	116af911be	Disables API on planning elements controller.	12 years ago
Martin Czuchra	432b0b5f05	Disables API on reportings controller.	12 years ago
Martin Czuchra	fadb005dd5	Disables API on scenarios controller.	12 years ago
Martin Czuchra	e4fdf0675c	Disables API on timelines controller.	12 years ago
Martin Czuchra	259a08b5a9	Fixes redirection of planning elements. ... Creating a new planning element sends a "see other" with the new URL of the planning element. When created via the API, the redirection URL will be the API URL.	12 years ago
Jens Ulferts	720a510f0e	more concise respond declaration	12 years ago
Sebastian Schuster	e5859bb18c	Fixed breadcrump of timeentries reports_controller	12 years ago