17665 Commits (856e59e6d3fa8951b03ff7f855d2876c0749ad4e)

Author	SHA1	Message	Date
Markus Kahl	ddb40187ba	added regression spec for active users and fixed anonymous user's status	5 years ago
Markus Kahl	80bb46d47b	call protected method if defined	5 years ago
Oliver Günther	ad0e22d64a	Separately allow to disable sentry without removing dsn ... Allows us to quickly enable/disable only frontend reporting	5 years ago
Oliver Günther	4944f02e2d	Add time entry webhook	5 years ago
ulferts	17bd411b53	adapt the api authorization to the bcf api	5 years ago
Oliver Günther	91ecb3ba1e	Fix resetting the session for non-html requests ... this caused a CSRF issue on saas. Requests were being redirected to /admin/subscriptions/expired and wrongfully so for API and CSS requests. Now imagine a request to `/` with `login_required` for a non-logged in user 1. The GET `/` request is redirected to `/login?back_url=...` by ApplicationController. Session is reset here to X 2. The user receives the login form with CSRF value from session X 3. A request is made to `/api/v3/configuration` from the frontend. It too is redirected to a Rails controller and ends up in the same `check_if_login_required` flow, resetting the session again 4. The user now has a session cookie Y, but the CSRF form is still from X 5. submitting it results in 422 CSRF validation error	5 years ago
Oliver Günther	51e8387e78	Remove builtin status ... [ci skip]	5 years ago
Oliver Günther	56a75602a6	[31609] Make system user active	5 years ago
ulferts	00a31728fc	increase strictness on regexp for default orders ... Otherwise partial matches would also count e.g. is_public matches as public is a substring.	5 years ago
ulferts	c96c5b89d5	only require copy_project permission to show button	5 years ago
Oliver Günther	ee0bbcd043	Use deliver_now in test mail ... [ci skip]	5 years ago
ulferts	8d0ae7ad46	move notification box higher	5 years ago
ulferts	a8bc7b6c18	move @is_leaf resetting to different module	5 years ago
ulferts	b9b72f7204	linting	5 years ago
ulferts	9b9ee1349a	memoize leaf? method	5 years ago
ulferts	5869966f12	relay available_custom_fields call to cacheable class method ... That way, we avoid n+1 queries for the available custom field especially in scenarios like schemas and api collections where a set of models is queried for their custom fields	5 years ago
ulferts	aa3698d061	fix summing custom fields on wp table ... Before the fix, string values where returned and then the `+` method was called which lead to the strings being concatenated. A subsequent call of `integer?` failed. The fix performs the aggregation in the database which is not only correct then but can also be carried out considerably faster. The drawback is, that the casting breaks the abstraction introduced by the cf strategies	5 years ago
ulferts	cd3ffe0cc5	adapt specs to altered interface	5 years ago
ulferts	184c0e42be	fix contract writability check side effect	5 years ago
ulferts	bbd058d536	extend interface on all base services	5 years ago
ulferts	4eab6effe1	merge changed_by_system into contract options	5 years ago
ulferts	3dabb46dd9	allow copying projects without parent project reference	5 years ago
Oliver Günther	c4e5ce68ea	Turn autocomplete off on ldap password form	5 years ago
Oliver Günther	7a09d8fcdd	delay all jobs	5 years ago
Oliver Günther	31fd78ca4f	Minify IFC logo ... [ci skip]	5 years ago
Oliver Günther	0ca9f4d742	Fix output destination paths of font ... [ci skip]	5 years ago
Oliver Günther	1c6ed3671a	[30920] Fix links in task lists ... They were broken due to the way todo list labels and inputs are nested differently when links are present: CKEditor converts todo lists differently when they contain a link <ul class="todo-list"> <li> <label class="todo-list__label"> <input type="checkbox" disabled="disabled" checked="checked"> <span class="todo-list__label__description">4 teaspoons baking powder&nbsp;</span> </label> </li> <li> <a href="https://example.com"> <label class="todo-list__label"><input type="checkbox" disabled="disabled"> <span class="todo-list__label__description">1/4 teaspoon salt&nbsp;</span> </label> </a> </li> </ul> which is why we need to override the list item rule for turndown to address this and replace the todo list on our own. https://github.com/opf/commonmark-ckeditor-build/pull/45 https://community.openproject.com/wp/30920	5 years ago
ulferts	dca1c3fb58	fix unsetting all workflows	5 years ago
ulferts	7b8600b8dc	simplify code	5 years ago
ulferts	67e3a7a15a	let mail sending rely on notifications ... That way, the two are no longer intermingled and we can build on the notifications in other use cases like it is already done for the webhooks	5 years ago
ulferts	e86d757cb5	limit notification disabling to mail only	5 years ago
Oliver Günther	6f6bec8b22	Add optional sentry handling of frontend errors	5 years ago
ulferts	d37bdb71f0	extract methods	5 years ago
ulferts	f6226524dd	extract shared code into module	5 years ago
ulferts	0c5aeb4cdf	remove outdated styles	5 years ago
Oliver Günther	27503bf516	bump ckeditor to 15.0	5 years ago
ulferts	1999fb6fb2	align estimated time column	5 years ago
ulferts	75d34621fb	adapt project order to altered db column name	5 years ago
ulferts	924a3dfb04	adapt project order to altered db column name	5 years ago
Markus Kahl	a2cff4f16c	make label consistent with instructions (plain value, format in view)	5 years ago
Oliver Günther	a7ed2e9da0	Rewrite jobs to use ActiveJob syntax	5 years ago
Oliver Günther	3aa3dea512	Allow `deliver_later` using a custom ApplicationJob ... We're getting more and more reports on synchronous Timeouts and SMTP errors causing internal errors for users when trying to send mail in the request of the browser. With rails 5.2, we can assign a custom job that handles the `deliver_later` delayed sending. We can hook this into the ApplicationJob with delayed_job. Since rails now also has GlobalID serialization of ActiveRecord, we don't even need to do the serialization ourselves!	5 years ago
Oliver Günther	d001679673	[31531] Fix visiting history wiki content ... https://community.openproject.com/wp/31531	5 years ago
ulferts	46a505a0e8	use cdkPlaceholder but hidden to avoid scroll jumping	5 years ago
ulferts	535ecdf0aa	allow d&d to bottom of grid	5 years ago
Oliver Günther	bcfec6ea11	[31513] Re-add the parent_id in the SetAttributeService ... https://community.openproject.com/wp/31513	5 years ago
Markus Kahl	5b013f2d46	put consent checkbox label in helper; support markdown	5 years ago
Oliver Günther	68d38fe2d5	[31500] Output correctly translated errors in mail handler ... https://community.openproject.com/wp/31500	5 years ago
ulferts	60b4b47c75	ensure journal notifications value is reset ... Before, an execption raised within the block would lead to the value not being reset. This happens e.g. when a transaction is canceled. This caused spec failures to occur from time to time e.g. rspec ./spec/models/work_package/openproject_notifications_spec.rb[1:1:1:1] ./spec/requests/api/v3/membership_resources_spec.rb[1:2:3:1] --seed 92792 but might also have unwanted side effects in production	5 years ago
ulferts	5b217ec039	prevent multiple clicks on member destroy link	5 years ago