3061 Commits (9590180303fac0fd3601b2b3e272d784b286378a)

Author	SHA1	Message	Date
Jens Ulferts	a5ec412f3d	harmonize saving plugin settings	8 years ago
Jens Ulferts	01bbc0face	harmonize settings#value to not be AC::Params	8 years ago
Markus Kahl	9fc18f6bf6	must be a path if we can't parse it as an URI ... also even if it was an URI, it's no good if it's invalid	8 years ago
Jens Ulferts	da7b63eeb7	discard empty and duplicate permissions	8 years ago
Markus Kahl	471733ab05	prevent renaming wiki pages if there will be menu item conflicts	8 years ago
Jens Ulferts	a6d265eb79	force bool custom values to be stored uniformly	8 years ago
Jens Ulferts	a22b0dfd2b	force options on timelines to be a hash ... There used to be a mix of Hash and ActionController::Parameters in the database	8 years ago
Oliver Günther	4fab8974ce	Fix legacy search controller spec after permitted params	8 years ago
Oliver Günther	8391a9c0d2	Use PermittedParams to allow search parameters	8 years ago
Oliver Günther	9ff3bd8ad9	Add temporary hash-like check for AC::Params	8 years ago
Jens Ulferts	9cef3656bf	replace deprecated table_exists	8 years ago
Jens Ulferts	c00a2602e2	fix permitting custom field value params	8 years ago
Jens Ulferts	2dd3a9a339	use AR .arel_table to avoid deprecation	8 years ago
Oliver Günther	47cf64f46e	Avoid checking for Hash on params	8 years ago
Oliver Günther	7e8f21f5a6	Check presence on RolePermission	8 years ago
Oliver Günther	117dfa4e2d	Legacy: Fix functional projects controller spec	8 years ago
Oliver Günther	4224430a9e	Unescape HTML entities after `strip_tags`	8 years ago
Oliver Günther	2cc285251a	Fix invalid self-reference	8 years ago
Jens Ulferts	db6d2c6ffd	use project.id specifically to avoid db error	8 years ago
Jens Ulferts	181514742f	replace observers by moving functionality inside the observed object ... The observers should have been removed a long time ago and with rails 5 there is https://github.com/rails/rails-observers/issues/52 to consider as well.	8 years ago
Jens Ulferts	3b9df1f3e0	adapt sanitizer used	8 years ago
Jens Ulferts	05f0bc2a5b	replace deprecated merge!	8 years ago
Jens Ulferts	b129f14079	replace removed method AR method #type_cast_from_database	8 years ago
Jens Ulferts	6f6598bd84	delete_all and reload rails 5 way	8 years ago
Jens Ulferts	693090136d	normalize permissions ... With rails 5 it is no longer possible to create an sql like statement via arel which will check whether a serialized array contains a string. AR will only allow to create a match against an array if the column itself is marked to serialize an array. Because of this and in order to increase the normalization of the data, the permissions are no longer serialized and are moved into a separate table instead. While this is still not normalized, it satisfies the needs	8 years ago
Jens Ulferts	a17758e474	reload association rails 5 style	8 years ago
Jens Ulferts	ffc4737ada	no longer pass two attributes to ActiveRecord::Base#initialize	8 years ago
Oliver Günther	07420ed62e	Use strings for filter values in backend and frontend ... When initializing a query from id, ID values (e.g., version) are integers, with query_props (and thus, URL params), they are returned as strings. This causes an invalid selected value starting with Angular 1.4 due to the correct typing of ngoptions.	8 years ago
Oliver Günther	0f6c644b9e	WIP	8 years ago
Oliver Günther	833b79645b	Remove unused method	8 years ago
Oliver Günther	6cad072dc8	Fix reference to global UserSession in dev mode ... [ci skip]	8 years ago
Oliver Günther	59da2c6175	Actually rehash on the correct object instance ... `becomes!` does not change the current object (how would it?), so we need to call `hash_password!` on the object returned from it. This also extends the false positive test. The rehash actually happened, but it was hashing the plain as a legacy SHA-1 again.	8 years ago
Oliver Günther	fff21a1229	UserPasswords: Replace salted SHA-1 with bcrypt ... This adds a typed userpassword class for Bcrypt password hashes that replace the previous default of salted SHA1. It still provides a class for SHA1 passwords, however new passwords of that type may no longer be created directly, and passwords are checked whether to upgrade them on every login.	8 years ago
Alex Dik	e5900f7e3c	Fix 6.0.4 merge artifacts	8 years ago
Oliver Günther	513f491256	[23814] Include subprojects in filter ... With #4771, subprojects were no longer included in the query results unless an explicit subproject filter is set. This commit re-enables the `Setting.display_subprojects_work_packages?` check. https://community.openproject.com/work_packages/23814	8 years ago
Oliver Günther	98fdadd02c	Add UserSession model to store user_id in sessions	8 years ago
Jens Ulferts	3246747ae0	adapt to newly introduced query	8 years ago
Jens Ulferts	acd58213e1	rewrite sql string in a arel based query	8 years ago
Jens Ulferts	36c785b7c8	set update_on when recreating content from journal	8 years ago
Jens Ulferts	03c372fd47	use project condition to avoid extra db call	8 years ago
Jens Ulferts	db7bd7e591	use method instead of reprogramming it	8 years ago
Jens Ulferts	8a8dfdd3de	move project allowed query to authorization	8 years ago
Jens Ulferts	ff3ecc9e59	employ sql based user allowed scope for acts as watchable	8 years ago
Jens Ulferts	1ddc142fd3	add sql based query to fetch all users being allowed an action	8 years ago
Jens Ulferts	06c6defa51	replaces ruby based permission check for allowed_to? with sql based query	8 years ago
Jens Ulferts	3ee5c4edb6	clear cache before firing the settings callback ... Otherwise, callback listeners working on the change can not get the current value	8 years ago
Markus Kahl	90868bd579	moved status options module to more appropriate place	8 years ago
Jens Ulferts	b746caa697	eager load cf translations	8 years ago
Jens Ulferts	209169c6f8	start summing up only on summable columns	8 years ago
Jens Ulferts	63ef13fd48	avoid loading whole object when only interested in id	8 years ago