4915 Commits (9d66d29818210910c45325fef4ac3b3d529e76d8)

Author	SHA1	Message	Date
Hagen Schink	2e661db019	Show cost entries	12 years ago
Michael Frister	f884fbf4c2	Add option to prevent former passwords from being reused ... Squashed from single commits: * Add checks to prevent former passwords from being reused * Make number of banned former passwords configurable Also group settings into fieldsets on the authentication settings page. * Update TestUnit fixtures with UserPasswords * Add migration for creating user passwords * Fix new user password not being immediately used * Add cuke for ban of former passwords * Fix admin info showing whether admin password was changed * Fix password check for user without password and fix tests * Fix password complexity feature after translation changes * Adapt my_controller_spec to UserPasswords * Order UserPasswords by id created_at is not unique within one second, this breaks MySQL tests. id is guaranteed to be unique and monotonically increasing on MySQL and on Postgres(at least as long cache is not set for the sequence). * Rename secure_compare to secure_equals? * Immediately use reduced number of banned former passwords Only check number of former passwords as defined in settings. The number of stored passwords per user is only reduced when a user updates the password. * Add missing copyright notices * Update changelog	12 years ago
Sebastian Schuster	132ff23308	Added plural translation for role model	12 years ago
Christian Ratz	85012b3c7d	changed wording; spec new case	12 years ago
delinde	55b69f07cd	Update de.yml ... Ich habe einige Dutzend Kommata und Großschreibungen nachgerüstet, einige wenige Tippfehler und Übersetzungen ausgebessert. Übersetzungen fehlen noch in Zeilen 565, 566 und 1229. Groß/klein-Schreibung finde ich fraglich in 573, 633, 636, 642, 684, 1407 ff. Fraglich: 1378 "vor" oder "von"? 1399 "werden" oder "wird"?	12 years ago
Christian Ratz	1298b0f7f4	more reliable session lifetime ... - allow only integer value for session ttl - disable session lifetime for ttl < 5 min - added hint to settings	12 years ago
Christian Ratz	f06e6f9ed7	[opf1054] Implements configurable session_lifetime ... - added locales also for the settings	12 years ago
Christian Ratz	d4ed4d72c1	Added session lifetime settings ... - default session lifetime settings - configurable in admin area	12 years ago
Sebastian Schuster	6d8eb89d53	Removed function to preload circular dependencies ... since it is not always running first to load the dependencies (see Bundler.require in application.rb), therefore explicitely requiring the dependencies in the files loads classes in the correct order no matter which is loaded first	12 years ago
jwollert	dcaad6133a	pluralize search translations, as we use multi-selects	12 years ago
jwollert	3c52ed586e	readd role search translation	12 years ago
Sebastian Schuster	a2e1c5d13a	Removed unnecessary route	12 years ago
Sebastian Schuster	3b4ddc187d	Fixed missing translations	12 years ago
Sebastian Schuster	7bea887a3d	fixed rspecs	12 years ago
Nils Kenneweg	c3de2dd008	updated pagination api to v2.	12 years ago
Jens Ulferts	dcce9d5f52	adds translations for created_/updated_on	12 years ago
Christian Ratz	0ca018a014	Added hooks to admin info view ... - one on top and one on bottom - added headlines for the different parts	12 years ago
Sebastian Schuster	0ea48de7f8	Changed no timezone set messages to get assumed time zone as parameter ... and use the system time zone as parameter	12 years ago
Sebastian Schuster	f4b4405649	Added flash message with link to user preferences if no time zone is set upon meeting creation	12 years ago
Jens Ulferts	f72417bb78	i18n for created_/updated_at	12 years ago
Michael Frister	7ba90102a7	Add option to force a user to change password on next login ... * Add force_password_reset field to user * Add force_password_reset field to user edit form Also, reindent the form HTML. * Rename force_password_reset to force_password_change * Force password change: Show form on login, allow change * Remove unused step definitions for setting RAILS_ENV * Fix forced password change, add cuke * Don't reveal whether user exists when not authenticated * Also add spec for testing reaction when user is not allowed to change the password. * Improve force password change code after review * Fix MyController password test and change to spec * Fix AccountController force password change spec	12 years ago
Michael Frister	607c6a680d	Revert "if we are loged out and do ajax, we can redirect to login page." ... This change results in a JavaScript dialog, which breaks cucumber tests. This reverts commit b3262028db.	12 years ago
Sebastian Schuster	32f6a7ae61	Convert into engine	12 years ago
Sebastian Schuster	342357b790	Fixed missing translation for subproject issue filter	12 years ago
Sebastian Schuster	1daf481699	Fixed missing translation for view calendar permission	12 years ago
Sebastian Schuster	8d0a8e33a3	Fixed missing translation for workflow controller	12 years ago
Sebastian Schuster	e1f9b0ec15	Fixed missing translation for journal log description diff	12 years ago
Sebastian Schuster	edf430454c	Added translations for permissions of costs plugin	12 years ago
Sebastian Schuster	1e52dea298	Sorted translations for easier tracking	12 years ago
Jens Ulferts	c93870930e	prevent project_association between a project and itself	12 years ago
Jens Ulferts	665ec97e2b	nest project_association api route within projects	12 years ago
Sebastian Schuster	c3f22ce258	Fixed missing translations	12 years ago
Sebastian Schuster	d97c96b41c	Changed routes to index costlogs to be more similar to the routes of indexing time entries	12 years ago
Martin Czuchra	76c949005b	Fixes some routes. ... This turns planning_element_type_colors back to colors in URL, as well as adding the ajax backend available_projects to routes.	12 years ago
Martin Czuchra	451feb0296	Fixes issues preventing a browser demo. ... This adds the api/v2 routes and alters the timelines client to use the new api. This also fixes some remaining controller name problems in the routes and views.	12 years ago
Martin Czuchra	2c410f54b8	Removes remaining timelines prefixes from i18n keys. ... Some "timelines/.*" keys somehow stayed in there and broke some specs. This is now fixed.	12 years ago
Sebastian Schuster	e5b99fba5a	Sorted translations for easier tracking	12 years ago
Sebastian Schuster	744bb4b61b	Sorted translations for easier tracking	12 years ago
Sebastian Schuster	83ed5b22c3	Added missing translation for reporting module name	12 years ago
Nils Kenneweg	a2e5c6abba	fixed planning element pagination.	12 years ago
Nils Kenneweg	34ccbb3b81	fixes project pagination.	12 years ago
Michael Frister	089db98541	Improve password complexity requirements ... Add a new Passwords module, which evaluates and generates passwords. Adapt User to use this module. In addition to checking the length, the module verifies that a password contains a certain number of character classes like uppercase/lowercase. These classes can be configured in the authentication settings. Also increase the default minimum password length from 4 to 10.	12 years ago
Sebastian Schuster	501415d948	Fixed double scoping of cost reports routes	12 years ago
Martin Czuchra	46ffcfc195	Refactors current timelines API into api/v2.	12 years ago
Martin Czuchra	1db1c1fcce	Refactors current REST API into api/v1 ... This is to make room for the timelines API to join as api/v2.	12 years ago
Sebastian Schuster	e667302888	Changed translation for Cost type to use small letters to fix reporting cuke	12 years ago
Christian Rijke	c981f068ec	Revert to previous non-RESTful routes to fix report button controls.	12 years ago
Sebastian Schuster	634d7f3d8e	Added translation for attribute overridden costs	12 years ago
Jens Ulferts	bf1cb1e449	removes vendored acts_as_list ... The patch applied on it was moved to a separate module which is loaded during initialization. In order to have all the classes using acts_as_list receive the patch, it is necessary to load the patch as early as possible. Hence the patch is loaded in 10-patches.	12 years ago
Nils Kenneweg	5fe4222165	ajax without session gives us a popup. ... the popup asks if we want to redirect to the login page.	12 years ago