openproject

Commit Graph

Author	SHA1	Message	Date
Oliver Günther	e9d7c374cc	[37868] Whitelist for attachment mime types and extensions on upload (#9431 ) * Add setting for whitelist * Make attachments API BaseServices compatible * Add prepare service and contract * Correctly pass the filename to the UploadedFile * Add presence check to filename * Fix expected validation message * We no longer raise a multipart error when metadata is empty * Fix filesize validation on prepared uploads * Add parser error if invalid metadata json * When attachment is not saved, use filename property * Return correct error message on JSON parser erroro * Fix specs * Use attachment upload representer * Fix direct uploads mocks with new service layer * Lint * Fix export job using attachment service * Fix IFC controller using attachment prepare service * Fix export job * RenameRename params_getter to params_source * Fix mail handler using attachment service * Fix usage of attachment create service in documents * Reuse shared examples for document attachment spec * Fix stubbed attachment service in export job spec * Use admin user in backup spec * Fix export job for bim * Fix attachment integration spec * Fix issues_controller spec * Make budget resource spec reuse common examples * Fix attachment parsing representer spec * Replace prepare part of attachment spec into separate service spec * Clear cache for login spec * Convert document create/update into services * Budget services * Allow options to be passed to property twin * Remove setting author on budget initialize * Replace meetings update with services * Replace ifc models attachment handling with services * Don't check uploader if changed by system * Fix uploader being changed by system * Replace wiki page attach_files with attachable services * Replace avatar saving * Replace snapshot attach_files * Skip double validation when container present * Set snapshot through attachment service * Remove attach_files * Validate content type in contract * Enforce writing the content type without accepting user input * Expect changed content_type * Fix content of viewpoint image to get correct content type * Fix tsv spec * Add create contract spec * Bypass whitelist in internal services when conflicting with user * Fix expects in specs after whitelist bypass * Render contract errors for wiki * Add before_hook to bodied to allow to pre-authorize permissions * Budget errors from contract * Document errors from contract	3 years ago
ulferts	0c2d87b4eb	choose wp type by position only (#9297 ) There was a misconception in the code related to the `is_default` field. The `is_default` field only governs whether a type is enabled by default in a new project or not.	4 years ago
Oliver Günther	cb5fbb6a72	Use the configured variable for expiry https://github.com/opf/openproject/pull/8941	4 years ago
Oliver Günther	8df966abff	Use the configured variable for expiry (#8985 ) https://github.com/opf/openproject/pull/8941	4 years ago
ulferts	1bdd2ab9ae	safe automatic fixes by rubocop (#8994 )	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925 ) Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
Wieland Lindenthal	231511107b	Introduce separate permission for deleting BCF issues Deleting BCF issues requires the permission to delete work packages. And this is something we usually do not want to permit too easily. As many people need the right to manage BCF issues and less people need the right to delete them, I think we should separate the two.	5 years ago
Wieland Lindenthal	67c3bc7f41	Since BCF 2.1 use file suffix .bcf instead of .bcfzip	5 years ago
Wieland Lindenthal	d8fbe4f68b	BCF-XML: reject unsupported BCF versions	5 years ago
Wieland Lindenthal	060c25f284	Reduce max-age header for snapshot request to S3 maximum	5 years ago
Oliver Günther	156b62e4c1	[32750] Fix patch for global role access control to hide disabled modules https://community.openproject.com/wp/32750	5 years ago
Oliver Günther	205cfd7b93	[32652] Add viewTopic action to extensions and hide BCF group if not present https://community.openproject.com/wp/32652	5 years ago
Oliver Günther	5c33748111	Compare the modified_date in topic spec with allowed time difference	5 years ago
Markus Kahl	24aeaa0c6d	added validation checking that work package is not part of a bcf issue already	5 years ago
Markus Kahl	62a9d903e6	create bcf issue based on existing work package	5 years ago
Oliver Günther	1815468693	Fix specs	5 years ago
ulferts	0b6d82c632	cache non avatar attachments for a year	5 years ago
Oliver Günther	3bdafeb630	Reload work package before expected_body	5 years ago
ulferts	acdd0bc821	disable oj for viewpoint body parsing oj in rails mode sometimes parses numbers to BigDecimal. Those then are serialized to strings when assigned to a JSONB column of an AR model, e.g. viewpoint's json_viewpoint attribute. The classic json gem does not behave in the same way so we use it for viewpoint parsing.	5 years ago
Oliver Günther	2c1623ac95	Reload the work package in topic spec It was updated due to the request [ci skip]	5 years ago
ulferts	b9d7316314	attempt to fix flickering spec	5 years ago
Oliver Günther	7bfde5f57e	Fix more specs	5 years ago
Oliver Günther	334548c137	Fix specs and references	5 years ago
Oliver Günther	d93fee38a4	Fix lookups and namespacing	5 years ago
Oliver Günther	65f8ae05c3	Move BCF into bim module	5 years ago

26 Commits (a539e334dcda3dfc8f7a4d76ca3a527568470448)