2911 Commits (80bd20547ac0b304a366064768d7aa05188236f8)

Author	SHA1	Message	Date
Oliver Günther	1360639341	Fix URI escaping of svn checkout paths ... The paths weren't properly escaped for URLs. This fix allows any subdirectory of arbitrary chars to be displayed as a checkout URL. This also fixes an escaping issue in the adapter that prohibits checking folder with special characters which SVN doesn't care about.	9 years ago
Markus Kahl	6827c832f6	make available standard I18n's #t	9 years ago
Oliver Günther	396dcdd859	Add path-based checkout for SVN	9 years ago
Oliver Günther	d36c7d6591	Fix committers array access ... When adding a new committer to a repository, the user collection was `compact!`ed, which no longer exists on relations with Rails 4+. Thanks to @gehasia for spotting and proposing a fix for the bug.	9 years ago
Oliver Günther	1f75bd22b0	Use XML parser middleware	9 years ago
Oliver Günther	3cbc4e71b8	Disable CSRF for add-in ... The TaskConnector add-in doesn't handle CSRF tokens.	9 years ago
Oliver Günther	caa07c5dd4	Initiate omniauth request with relative root url awereness	9 years ago
Henriette Dinger	0f00d0452c	Add flash message for successfull deletion	9 years ago
Oliver Günther	fb4bf739d9	Allow the configuration to disable APIv2 basic auth	9 years ago
Oliver Günther	82eb512450	Make session name configurable	9 years ago
Oliver Günther	c7e410ef11	Warn users when OP cookie is missing ... When a user has disabled cookies, trying to log in to the application will result in a 422 error due to CSRF validation trying to use the session in Rails 4+. This commit introduces a separate warning when the OpenProject cookie was not found, which should always be present after the first request to the application.	9 years ago
Oliver Günther	34893071e1	Format dates according to the user's timezone ... By default, the date headlines of activities will be output with UTC+0, which may pose a problem when work in different timezones.	9 years ago
Henriette Dinger	595e25a346	Add missing flash messages	9 years ago
Oliver Günther	8b0cd01d9c	Use back_url for bulk move, copy, and edit ... This sets the back_url to wherever the bulk request originated from, allowing users to be redirected to their old work package, query, or table. Note that this does not simply work for bulk destroy, since users may use that functionality from split/full view and will in this case be redirected to a non-existing resource. We might pass a query_id in this case (to at least redirect back to queries), however it would be better if the frontend decided what path the user should be redirected to in this case.	9 years ago
Markus Kahl	b83d76fe35	show proper error on failure instead of 500	9 years ago
Markus Kahl	a9382e8802	resend invitation feature	9 years ago
Oliver Günther	a801a5c403	Unescape titles coming from route params	9 years ago
Jens Ulferts	2dfcd12abf	improves performance of work package autocompleter ... * add db hint on mysql to use primary key for the ORDER BY * restrict the fiels to search on based on the character of the search query. e.g. if there are alphabet characters in the search query, we don't have to search on the id column	9 years ago
Oliver Günther	5cd5040e9e	Fix invalid params on category edit ... The edit route wrongly assigned parameters to the category, although it should only render the edit form. This only became apparent when strong params where requiring the `:category` param hash.	9 years ago
Jens Ulferts	be21a7a504	update error message for bulk operations across multiple projects	9 years ago
Markus Kahl	7f88ba5b22	removed attachments#show; only #download remains	9 years ago
Jens Ulferts	8c506b6f6e	remove redundant security check ... One might be able to constantize arbitrary objects (those that exist) but the checks after the constantize are very strict. They will only allow the find method to be called on objects inheriting from Acts::As::Watchable. The only parameter that is allowed for the method is an integer.	9 years ago
Stefan Botzenhart	e7490c1988	Fix copy project ... After switching to strong parameters mass assignment for project params is not supposed to work without permitting params. We now pass a normal hash instead of a ActionController::Params hash. Otherwise we get an ActiveModel::ForbiddenAttributesError All errors on the job are being rescued and logged to a separate file. Normally rescueing all errors on Exception is not something you want to do but as the job has an ensure block you won't know about any failures.	9 years ago
Jens Ulferts	6750ecfdc3	remove no longer required concern	9 years ago
Jens Ulferts	b0e80e3448	streamline work_packages_controller ... because of the reduced actions, the complexity of the controller as well as in the tests can now be reduced	9 years ago
Jens Ulferts	eec7a844bc	remove remains of no longer existing actions	9 years ago
Jens Ulferts	4f43470f7b	403/redirect on work package not existing/not visible	9 years ago
Jens Ulferts	acf2cfcf11	use correct AR method to reverse ... This is the same as in 03a3460	9 years ago
Markus Kahl	0abc54d5ab	don't fail invitation on long email addresses	9 years ago
Markus Kahl	4bc8365075	don't fail invitation on long email addresses	9 years ago
Markus Kahl	5324b2cc07	drop my first_login; redirect to work packages if possible	9 years ago
Oliver Günther	f508d81655	Restore journals for atom access	9 years ago
Oliver Günther	b64ef39986	Remove relations	9 years ago
Oliver Günther	69fae7bc54	Remove other remnants	9 years ago
Oliver Günther	eb888b7d2e	Remove views and actions	9 years ago
Jens Ulferts	d364d7d418	indentation	9 years ago
Jens Ulferts	8868b3d741	reremove line accidentally readded by merge dc3337a	9 years ago
Jens Ulferts	03a3460ba2	use AR method to reverse ... reverse! is not defined on an ActiveRecord AssociationProxy. This used to work when an array was still returned	9 years ago
Oliver Günther	32da16e979	Avoid internal error when project not found	9 years ago
Jonas Heinrich	54bccf70f8	Rename Settings to System Settings	9 years ago
Mohamed Wael Khobalatte	80192f6986	Do away with eval ... Eval is unnecessary here. Sure the code has slighly more duplication, but no where near enough to warrant an eval.	9 years ago
Mohamed Wael Khobalatte	35693f2940	Re-implement my/page block drag and drop in dragula and jQuery ... We part ways with Protoype's Sortable module, link_to_remote, and some javascript in favor of a tigher implementation using dragula, jQuery, and some js.erb responses. Sorting logic was also simplified; we now merely send the state of the source and the target of the drag&drop to the server where it persists. We no longer make a special case for each of the containers.	9 years ago
Mohamed Wael Khobalatte	0e72ec4243	Move to ruby1-9 syntax once and for all	9 years ago
Markus Kahl	1fbdec561e	allow new users independently from password config ... The new user form has been simplified and decoupled from the password/authentication choice previously. Accordingly we may, nay, we must enable the user creation again even with the password login disabled. In such a case a user will have to use OmniAuth.	9 years ago
Oliver Günther	589ba8e7b1	Relocate repositories locally and remote ... This commit introduces relocating a repository as a followup after a project's identifier has been renamed.	9 years ago
Mohamed Wael Khobalatte	4f3930be79	Call the correct hook for costs plugin	9 years ago
Mohamed Wael Khobalatte	602dd749e3	Ensure versions params play well with plugins	9 years ago
Mohamed Wael Khobalatte	a1bf92212d	Fix legacy and cucumber specs failing because of strong params	9 years ago
Mohamed Wael Khobalatte	8ec4b40b11	Restore own User#find_by_mail impl, as it was doing more than just find	9 years ago
Mohamed Wael Khobalatte	d2349cf819	Delete Redmine's safe_attributes implementation ... It was an early implementation of strong_parameters, more or less. Going forward, we should strive to make the whitelisting of attributes a controller responsibility only.	9 years ago