openproject

Commit Graph

Author	SHA1	Message	Date
Oliver Günther	109ade62da	Allow editing auth_source as a global user (#8954 )	4 years ago
Oliver Günther	3c9be3bdbe	[35507] Allow global permission to add and edit users (#8937 ) * Add global permission for add_user * Rename fieldset for global roles to "Global" * Add permission to admin actions * Add index action to add_user permission * Redirect to first admin item if only one * Hide status action for non admins * Break down user form into partials for easier rendering * Disable some user form tabs for non-admins * Make users API and services conformant with endpoints * Fix references to DeleteService#deletion_allowed? * Authorize add_user on show as well * Only show invite user toolbar item with permission * Fix Delete Service spec * Fix the way user prefs are handled in service * Ensure session_id is treated as string This causes a cast error otherwise as it passes rack session locally * Fix service call on onboarding controller * Fix service call on users controller * Add delete spec for global user * Hide login attribute again when adding a new user * Render auth source correctly in simple form * Fix creating invited users through service The invitation requires the mail attribute to be present. Previously, there was a manual error added to the mail. As the errors are now determined by the contract + model, we now end up with all missing properties as errors. * Properly constraint attributes for non-admins * Add specs for global user * Start working on how to update password from UsersController that code is a mess... * Change permitted_params spec to include non-admin params * Fix create user service spec * Remove mail_notification param from users controller It's not part of the contract/params passed to user * Remove todos * Extend docs * Correct the way backlogs patches into the user settings * Remove superfluous UpdateUserService * Rewrite duplicated update service examples into common shared example * Remove duplicate password writable check * Base Users::DeleteContract on base delete contract * Move checks for active users into the UserAllowedService * Restore password writable check as it is not an attribute * Fix menus for global user * Allow global users to add custom fields * Allow global user add permission to reinvite user * Fix changed var name in update service spec * Ensure also invited or registered users can be authroized This ensure that e.g., invited users can also be set as watchers * fix typo Co-authored-by: ulferts <jens.ulferts@googlemail.com>	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925 ) Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
ulferts	27b41a313c	replace custom i18n function in views	4 years ago
Oliver Günther	10e21154f7	Move asset pipeline javascripts to frontend (#8482 ) * ove reporting and reporting_engine js to frontend page * Replace webhook assets javascript * Add path augment service to dynamically load scripts * Remove JS-Files that are not used/not needed any more * Include AugmentingModule correctly * Remove special handling for checkbox selection which is outdated and two jquery libs that are not used any more * Load scripts dynamically that are not needed globally * Move plugin JS to frontend * Move toggable fieldsets to global listeners * Move top-menu to global listeners and convert to TS * Move action_menu to frontend and port to TS * Move settings listener to frontend * Remove global js assets that were not used anyway * Move date range to timelog dynamic script where it's still used until removed * Move colors to global-listeners and port to TS * Replace tooltip with simple form instructions on the one place used Tooltips were only used at the one place in our application, when changing a users password. We can simply remove it there and use a modern solution the next time we need a tooltip * Move danger zone validation to frontend and port to TS * Move colorcontrast to backlogs vendor where it's used now * Remove contents of application.js.erb * Move project and user scripts to dynamically loaded * Move onboarding tour to dynamically loaded * Use correct syntax for jQuery so that $ is known keyword within this function * Fix onboarding tour * Fix onboarding tour for scrum tour * Fix specs after moving JS * Remove application.js.erb * Move locales and ckeditor to the frontend to dynamically load * Remove bundles caches These are no longer being used since angular cli * Ensure locales are exported before angular Co-authored-by: Henriette Darge <h.darge@openproject.com>	4 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
Inga Mai	8d198202c4	Adding all missing -required classes	6 years ago
Henriette Dinger	747523156c	Remove accessibility styles and erb special cases	6 years ago
Henriette Dinger	1c3b235573	Move notification box to the password section	6 years ago
Oliver Günther	6c47b9da56	[28007] Show when user has no language selected [ci skip]	6 years ago
Oliver Günther	f5b08402da	Add consent information to user/edit	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171 ) [ci skip]	7 years ago
Wieland Lindenthal	7494064d86	fine tune input field widths for user forms	7 years ago
ulferts	0c0b16508b	Fix/bump representable (#5465 ) * bump reform and roar -> bumps representer * adapt to changed validation interface * disable initializer patch for now * adapt to changed representable attr interface * can no longer have private methods inside a representer * private no longer possible for representer * bump reform * wip - restyle validation * remove commented out patch * apply injection as prescribed * reactivate reform error symbols patch * remove patch to Hash superfluous wit ruby 2.3 * remove outdated human_attribute_name patch * whitespace fixes * adapt filter name after removal of human_attribute_name patch * adapt filter specs to no longer rely on human_attribute_name patch * fix version filter name * remove reliance on no longer existing human_attribute_name patch * use correct key in journal formatter * remove private from representer * adapt to altered setter interface * reenable i18n for error messages in contracts * no private methods in representer * defined model for contracts * fix validaton * instantiate correct Object * define model for contract * circumvent now existing render method on reform * replace deprecated constant * patch correct reform class - not the module - via prepend * refactor too complex method * replace deprations * remove remnants of parentId * prevent error symbols from existing twice * adapt user representer to altered setter interface * adapt watcher representer to altered setter interface * remove now unnessary patch * adapt setter to altered interface * adapt spec * fix custom field setters * remove parentId from wp representer As the parent is a wp resource, clients should use the parent link instead * adapt spec to changed valid? interface * remove parentId from wp schema * replace references of parentId in frontend * remove TODO [ci skip]	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Alexander Bach	fd13f1d697	Replace lots of hash rockets 🚀	9 years ago
Alexander Bach	0b8021bedf	Remove custom field heading in profile menu	9 years ago
Alexander Bach	ef1ffee9e1	Cleanup two factor authentication partial rendering	9 years ago
Alexander Bach	8575d649e9	Extract partial two factor authentication partial for better display	9 years ago
Jens Ulferts	e7e65b35ae	password only required for new users Because after that, passwords do not have to be set mandatorily for every user update. But for new users it of course is a requred field.	10 years ago
Markus Kahl	c3fa89e5db	disable password choice config	10 years ago
Alex Coles	e479bacd51	Apply form section styling to user forms Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	fa38bb9470	Apply styling to user forms Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	f55131ffa2	Fix field instruction spacing in Users form Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 [ci skip]	10 years ago
Markus Kahl	09e8a972f2	disable password choice config	10 years ago
Markus Kahl	4dade33b99	fixed password field toggle also dropped password change unsupported note	10 years ago
Markus Kahl	ee121560d3	hide auth sources if password login is disabled and also don't show the no-login warning for users with external auth sources	10 years ago
Markus Kahl	6df7074491	show note when change of password is not supported	10 years ago
Michael Frister	183fb9f408	User edit: Show external authentication provider	11 years ago
Michael Frister	4b868d7062	Use User#uses_external_authentication? for checking that	11 years ago
Michael Frister	dd738fb5cf	Omniauth: Hide authentication fields for users with external source This removes identity_url from safe_attributes and permitted_params and prevents admins from setting it as we are using identity_url now to identify users with an external authentication provider.	11 years ago
Johannes Wollert	8b096975fe	updates copyright headers updates more copyright more copyright headers	11 years ago
Philipp Tessenow	a1e67dd460	new copyright header #1903	11 years ago
Michael Frister	72318fa988	Small fixes after code review	12 years ago
Michael Frister	282c4d106b	User form: Fix random password assignment checkbox	12 years ago
Michael Frister	7cc19bb969	Improve form and process random password assignment	12 years ago
Michael Frister	3e4c1d8e88	User edit: Improve JavaScript and form [ci skip]	12 years ago
jwollert	57cdc7d5a1	migrate some basic strong password randomizing stuff	12 years ago
Michael Frister	7ba90102a7	Add option to force a user to change password on next login * Add force_password_reset field to user * Add force_password_reset field to user edit form Also, reindent the form HTML. * Rename force_password_reset to force_password_change * Force password change: Show form on login, allow change * Remove unused step definitions for setting RAILS_ENV * Fix forced password change, add cuke * Don't reveal whether user exists when not authenticated * Also add spec for testing reaction when user is not allowed to change the password. * Improve force password change code after review * Fix MyController password test and change to spec * Fix AccountController force password change spec	12 years ago
Michael Frister	a3e5a7a07d	Reenable autocompletion for register form except password Also remove superfluous autocompletion disabling of the user/edit and user/new password fields.	12 years ago
Jens Ulferts	21459a384f	provide every possible file with a short copyright notice This was done using the rake task: rake copyright:update	12 years ago
Philipp Tessenow	ddb0015e54	use new translation style for various user-related views	12 years ago
Jens Ulferts	b40a2b5204	renames rhtml to html.erb	12 years ago
Romano Licker	080490532d	[accessibility] rename accessibility flag option as follows: Heading: User interface Checkbox: Accessibility mode Heading: Nutzeroberfläche Checkbox: Für die barrierefreie Nutzung optimierte Oberfläche	13 years ago
Jens Ulferts	847d75038b	having application title displayed in the impaired settings	13 years ago
Gregor Schmidt	b4e52b046b	Adding view on my account/user settings to edit impaired-view setting	13 years ago
Gregor Schmidt	d78294434a	Revert set_impaired_flag functionality This will be added via a separate feature branch This reverts the commits * `3269edfa08` * `145f8104a0` * `f1973e710c` * `f790754487`	13 years ago
jwollert	f790754487	sets an impaired flag on first login of a user	13 years ago
Stephan Eckardt	d7f31455a0	added helper method for password complexity requirements	13 years ago

44 Commits (9e715063cf78f3cc8357f2cb78c067556f03c8e9)