4090 Commits (82a09519972bf4209214958dfba7beb78b095497)

Author	SHA1	Message	Date
Jens Ulferts	24e285f05e	do not provide params explicilty - use those sanitized by rails ... We used to pass in the params but rails will already provide the missing parameters in url_for. And those that are provided are sanitized.	8 years ago
Oliver Günther	16cf36dfb1	Remove skipped v2 view spec	8 years ago
Jens Ulferts	181514742f	replace observers by moving functionality inside the observed object ... The observers should have been removed a long time ago and with rails 5 there is https://github.com/rails/rails-observers/issues/52 to consider as well.	8 years ago
Jens Ulferts	ea36f19be2	replace ineffective permission assignments	8 years ago
Jens Ulferts	6fcb2913d4	cast to array before slicing	8 years ago
Jens Ulferts	94d69a39d7	reimplement test removed in 07cb02b	8 years ago
Jens Ulferts	693090136d	normalize permissions ... With rails 5 it is no longer possible to create an sql like statement via arel which will check whether a serialized array contains a string. AR will only allow to create a match against an array if the column itself is marked to serialize an array. Because of this and in order to increase the normalization of the data, the permissions are no longer serialized and are moved into a separate table instead. While this is still not normalized, it satisfies the needs	8 years ago
Oliver Günther	7fe77ac223	Add spec for correct escaping in wiki preview	8 years ago
Jens Ulferts	3396e2dc96	adapt spec format to avoid deprecation	8 years ago
Oliver Günther	3bba3c2c29	Fix occasional non-opening of edit field	8 years ago
Oliver Günther	fe0e8dd919	Rename before_filter to before_action	8 years ago
Oliver Günther	07cb02b631	Remove activerecord-tableless ... No longer supported on Rails 5. This does remove a spec for CopyModel!	8 years ago
Markus Kahl	0e54c5fcf6	fix lost grouping in exports; added regression test	8 years ago
Jens Ulferts	bafee7a5ab	adapt specs after gem bump	8 years ago
Oliver Günther	59da2c6175	Actually rehash on the correct object instance ... `becomes!` does not change the current object (how would it?), so we need to call `hash_password!` on the object returned from it. This also extends the false positive test. The rehash actually happened, but it was hashing the plain as a legacy SHA-1 again.	8 years ago
Oliver Günther	fff21a1229	UserPasswords: Replace salted SHA-1 with bcrypt ... This adds a typed userpassword class for Bcrypt password hashes that replace the previous default of salted SHA1. It still provides a class for SHA1 passwords, however new passwords of that type may no longer be created directly, and passwords are checked whether to upgrade them on every login.	8 years ago
Oliver Günther	57a4539ddb	Remove unused format.js versions#create	8 years ago
Jens Ulferts	28fc8d37b2	split memberships concerns from users controller	8 years ago
Oliver Günther	be72ea9605	[23853] Post the original form attributes when copying ... Previously, the copied work package would take over all attributes of the original work package, but the form was an empty create form, which results in only the default type and status being contained in the schema. We can instead post the attributes of the original WP form to retrieve a matching form response.	8 years ago
Jens Ulferts	c945cd2021	replace prototype in views	8 years ago
Oliver Günther	8593ad1c24	Replace deprected matcher implementation	8 years ago
Oliver Günther	6a91e4a32a	Fix wiki controller item specs	8 years ago
Oliver Günther	36c3d7d894	[23879] Fix editing a subject in the table after creation ... The form controller was not subscribing the latest work package and thus failed to receive the `$pristine` values set by the field controller after initial creation. https://community.openproject.com/work_packages/23879/activity	8 years ago
Oliver Günther	a365562aa7	[23881] Fix permission check in top-menu ... The global `new project` permission was always shown due to an incorrect authorization check. https://community.openproject.com/work_packages/23881	8 years ago
Oliver Günther	a9f2c55564	[23272] Show linked revisions from other projects if visible ... Revisions in other projects were not shown if the project containing the linked work package did not have a repository itself. https://community.openproject.com/work_packages/23272	8 years ago
Henriette Dinger	5c8056cbee	Fix broken tests	8 years ago
Oliver Günther	5f8ebfdfc6	Add feature spec to test expiry of sessions	8 years ago
Oliver Günther	a3c68572fc	Inherit parent with_config values ... If a parent example defines a `with_config` helper, that value is ignored whenever a children example uses the same helper with different keys. This commit takes over the same parent example merging from `with_settings`.	8 years ago
Oliver Günther	98fdadd02c	Add UserSession model to store user_id in sessions	8 years ago
Jens Ulferts	05e104e775	attempt fixing spec only failing on travis	8 years ago
Jens Ulferts	3246747ae0	adapt to newly introduced query	8 years ago
Jens Ulferts	ab93799c8b	improve menu performance by rendering to existing controller	8 years ago
Jens Ulferts	1c8c55d25f	avoid query initialization on html request	8 years ago
Jens Ulferts	44e4343f05	add integrational tests for Authorization.projects	8 years ago
Oliver Günther	c5ca7e7782	Actually save the title, not the name	8 years ago
Oliver Günther	3f4388816e	Replace setting with a configuration variable	8 years ago
Henriette Dinger	2e6adb9f6d	Fix broken specs	8 years ago
Jens Ulferts	a0c7658c18	only return users eligible for watching but not already watching	8 years ago
Jens Ulferts	ff3ecc9e59	employ sql based user allowed scope for acts as watchable	8 years ago
Jens Ulferts	1ddc142fd3	add sql based query to fetch all users being allowed an action	8 years ago
Jens Ulferts	06c6defa51	replaces ruby based permission check for allowed_to? with sql based query	8 years ago
Oliver Günther	97678334ee	Extend My Account specs	8 years ago
Markus Kahl	1f4a1e1001	updated specs to new integrated add-member functionality	8 years ago
Oliver Günther	ab62a6717b	Fix empty ENV overrides to be parsed as false ... YAML parses '' as false, but empty ENV variables will be passed as that. To mitigate that, we first check for an explicit empty string. To specify specific values, one can use !!str (-> '') or !!null (-> nil) return value if value == ''.	8 years ago
Henriette Dinger	36a3b722ba	Fix broken tests && add more tests	8 years ago
Henriette Dinger	a5e3f3223d	Add possibility to add project specific WP	8 years ago
Henriette Dinger	f0f078b208	Styling of separator in WP menu	8 years ago
Henriette Dinger	3388a64c9d	Add tests for WP top menu && limit visiblity rights	8 years ago
Henriette Dinger	1641335acf	Move code to initializers && remove WP from modules menu	8 years ago
Oliver Günther	98bbee2031	Scroll to textarea controls before clicking them	8 years ago