223 Commits (97f7c3a592f132fcfb093cf8aa7e4dfeaf551734)

Author	SHA1	Message	Date
Hagen Schink	b719fd911b	Checks user permissions and project id	11 years ago
Christian Rijke	8acc54811b	Only set updated_at for logged in users and not for anonymous users.	11 years ago
Christian Rijke	c9d1e660a4	Set updated_at immediately after login.	11 years ago
Christian Rijke	d42c9eb1a9	Refactor session_expired? conditions.	11 years ago
Christian Rijke	1ba73c4ef9	Always set session[:updated_at] to avoid logging out users when the administrator turns on session expiration.	11 years ago
Christian Rijke	3956f024d0	Log out users with empty session activity time when session lifetime is enabled.	11 years ago
Jens Ulferts	36b9870cd6	allows for rendering pdf from work_package#show ... This will break changset rendering on the issue page	11 years ago
Martin Czuchra	05f1f78d2d	Removes whitespace at end of line.	12 years ago
Jens Ulferts	cac318adfc	copies planning_elments#show to work_packages#show	12 years ago
Nils Kenneweg	45534694e0	intendation + changelog.	12 years ago
Nils Kenneweg	78c1bd075c	rename X-ACCEPT-AUTH=X-Authentication-Scheme, test	12 years ago
Nils Kenneweg	05003493e2	added reason to api.	12 years ago
Nils Kenneweg	22664cb7c9	401 standard conformity	12 years ago
Sebastian Schuster	423152fa06	Fixed the uninitialized constant exception ... caused by the user class being loaded first in a pure core configuration in development	12 years ago
Christian Ratz	1298b0f7f4	more reliable session lifetime ... - allow only integer value for session ttl - disable session lifetime for ttl < 5 min - added hint to settings	12 years ago
Christian Ratz	f06e6f9ed7	[opf1054] Implements configurable session_lifetime ... - added locales also for the settings	12 years ago
Sebastian Schuster	6d8eb89d53	Removed function to preload circular dependencies ... since it is not always running first to load the dependencies (see Bundler.require in application.rb), therefore explicitely requiring the dependencies in the files loads classes in the correct order no matter which is loaded first	12 years ago
Michael Frister	607c6a680d	Revert "if we are loged out and do ajax, we can redirect to login page." ... This change results in a JavaScript dialog, which breaks cucumber tests. This reverts commit b3262028db.	12 years ago
Jens Ulferts	9b96b67f10	moves more pagination methods to pagination helper	12 years ago
Nils Kenneweg	b26ed7847e	changed status code back to 401.	12 years ago
Martin Czuchra	1db1c1fcce	Refactors current REST API into api/v1 ... This is to make room for the timelines API to join as api/v2.	12 years ago
Nils Kenneweg	5fe4222165	ajax without session gives us a popup. ... the popup asks if we want to redirect to the login page.	12 years ago
Jens Ulferts	21459a384f	provide every possible file with a short copyright notice ... This was done using the rake task: rake copyright:update	12 years ago
Nils Kenneweg	b3262028db	if we are loged out and do ajax, we can redirect to login page.	12 years ago
Jens Ulferts	65ca202692	Introduces strong_parameters whithout making use of it yet ... This introduces the strong_parameters gem. It will be default in rails4 so I consider it a good idea to start using it now. This commit does not yet make use of the possibilities. It is intended so we start using it and in order for it to be available to plugins.	12 years ago
Martin Linkhorst	1b8c9bca93	most rails apps have a current_user method in ApplicationController for a good reason. this commit also adds a little documentation on why our User.current approach is problematic.	12 years ago
Martin Czuchra	247fc0de39	Improves check for api requests. ... Timelines introduces a case where the json format is negotiated but not represented in the format parameter via routes (i.e., the extension ".json"). This change adds support for Accept-header content negotiation, which results in the format field of the request. For consistency, xml was also added.	12 years ago
Martin Czuchra	3bcb05acb0	Improves check for api requests. ... Timelines introduces a case where the json format is negotiated but not represented in the format parameter via routes (i.e., the extension ".json"). This change adds support for Accept-header content negotiation, which results in the format field of the request. For consistency, xml was also added.	12 years ago
Philipp Tessenow	1d331d90b1	be careful with nested namespace'd controllers with computed controller values	12 years ago
Philipp Tessenow	d46f4fc458	ensure circular dependency load order in application controller	12 years ago
Martin Linkhorst	c5280b970f	in order to give plugins consistent entry points ... to patch core classes, we can use ActiveSupport's lazy load hooks. this one will allow plugins to register callbacks when the application controller is loaded. see the meta project plugin for a use case.	12 years ago
Gregor Schmidt	237c0c9a50	Making i18n-js work for OpenProject ... * Limit i18n keys in JS to the 'js' scope to reduce payload * Update i18n gem to make i18n-js work with limited scopes * Exporting translations on server start and not on every request to save computing resources and avoid impact on response times * Configuring i18n-js to use the same fallbacks like the ruby part to ensure consistent behavior across languages * Removing rake tasks from Rakefile since (a) they do not belong there - should have been in lib/tasks - and (b) they are no longer needed, since the export happens at server start NB: public/javascripts/i18n needs to be writeable by the app server user.	12 years ago
Gregor Schmidt	eeb052280f	Load user memberships by default ... since nearly every view will check permissions, eager loading memberships might be a good idea.	12 years ago
Martin Linkhorst	0105135c37	adding all helpers isn't necessary anymore	12 years ago
Martin Linkhorst	658dca7f06	move current_user helper	12 years ago
Martin Linkhorst	5325c2e1aa	this nice commit fixes the stack too deep error. as usual it was a human mistake :(	12 years ago
Martin Linkhorst	5fb51daab1	applied the rails 3.2 generator	12 years ago
Martin Linkhorst	2e927d6dc0	this nice commit fixes the stack too deep error. as usual it was a human mistake :(	12 years ago
Martin Linkhorst	40cecc66a3	applied the rails 3.2 generator	12 years ago
jwollert	4511a4e83d	adds i18n-js gem providing us with easier access to translations in js	12 years ago
Martin Linkhorst	4b7c30a6be	REVIEW: remove require_dependency which shouldn't be needed anymore?	12 years ago
Jens Ulferts	3471b107bc	rewrites routes for news, moves comments and previews controller into news namespace	12 years ago
Jens Ulferts	2fc22ef371	adds a find_object_and_scope that when used as a before filter finds all instances specified in the path ... * params[:id] used to retrieve instance of model classified by model_object * params[:XYZ_id] used to retrieve instances of all models specified as the scope of the model. This is specified via model_object as well.	12 years ago
Jens Ulferts	9e2f020cf9	moves issue preview into resource routes ... * splits previews for news and issues	12 years ago
Jens Ulferts	22fa84da31	simplifies responses to login_required ... * uses named_routes to avoid being trapped inside a namespace	12 years ago
Dennis Schmidt	107647a816	renamed feed.atom.rxml to feed.atom.builder	12 years ago
Jens Ulferts	304c287c99	filtering the password now defined in application.rb	12 years ago
Jens Ulferts	ee6eed8d4f	as views are rendered according to their type an explicity limitation statement is no longer necessary	12 years ago
Jens Ulferts	f65190afd0	uses openproject header for api requests ... * instead of ChiliProject	12 years ago
Felix Schäfer	4d83a94174	use all available languages as default ... Should probably get refactored as a custom I18n backend	13 years ago