3175 Commits (a58b45aff420f478e90a0875300d8790b4b8cba5)

Author	SHA1	Message	Date
Oliver Günther	8391a9c0d2	Use PermittedParams to allow search parameters	8 years ago
Oliver Günther	9ff3bd8ad9	Add temporary hash-like check for AC::Params	8 years ago
Jens Ulferts	9cef3656bf	replace deprecated table_exists	8 years ago
Jens Ulferts	c00a2602e2	fix permitting custom field value params	8 years ago
Jens Ulferts	2dd3a9a339	use AR .arel_table to avoid deprecation	8 years ago
Oliver Günther	47cf64f46e	Avoid checking for Hash on params	8 years ago
Oliver Günther	7e8f21f5a6	Check presence on RolePermission	8 years ago
Oliver Günther	117dfa4e2d	Legacy: Fix functional projects controller spec	8 years ago
Oliver Günther	4224430a9e	Unescape HTML entities after `strip_tags`	8 years ago
Oliver Günther	2cc285251a	Fix invalid self-reference	8 years ago
Jens Ulferts	db6d2c6ffd	use project.id specifically to avoid db error	8 years ago
Jens Ulferts	181514742f	replace observers by moving functionality inside the observed object ... The observers should have been removed a long time ago and with rails 5 there is https://github.com/rails/rails-observers/issues/52 to consider as well.	8 years ago
Jens Ulferts	3b9df1f3e0	adapt sanitizer used	8 years ago
Jens Ulferts	05f0bc2a5b	replace deprecated merge!	8 years ago
Jens Ulferts	b129f14079	replace removed method AR method #type_cast_from_database	8 years ago
Jens Ulferts	6f6598bd84	delete_all and reload rails 5 way	8 years ago
Jens Ulferts	693090136d	normalize permissions ... With rails 5 it is no longer possible to create an sql like statement via arel which will check whether a serialized array contains a string. AR will only allow to create a match against an array if the column itself is marked to serialize an array. Because of this and in order to increase the normalization of the data, the permissions are no longer serialized and are moved into a separate table instead. While this is still not normalized, it satisfies the needs	8 years ago
Jens Ulferts	a17758e474	reload association rails 5 style	8 years ago
Jens Ulferts	ffc4737ada	no longer pass two attributes to ActiveRecord::Base#initialize	8 years ago
Oliver Günther	07420ed62e	Use strings for filter values in backend and frontend ... When initializing a query from id, ID values (e.g., version) are integers, with query_props (and thus, URL params), they are returned as strings. This causes an invalid selected value starting with Angular 1.4 due to the correct typing of ngoptions.	8 years ago
Oliver Günther	0f6c644b9e	WIP	8 years ago
Oliver Günther	833b79645b	Remove unused method	8 years ago
Oliver Günther	6cad072dc8	Fix reference to global UserSession in dev mode ... [ci skip]	8 years ago
Oliver Günther	59da2c6175	Actually rehash on the correct object instance ... `becomes!` does not change the current object (how would it?), so we need to call `hash_password!` on the object returned from it. This also extends the false positive test. The rehash actually happened, but it was hashing the plain as a legacy SHA-1 again.	8 years ago
Oliver Günther	fff21a1229	UserPasswords: Replace salted SHA-1 with bcrypt ... This adds a typed userpassword class for Bcrypt password hashes that replace the previous default of salted SHA1. It still provides a class for SHA1 passwords, however new passwords of that type may no longer be created directly, and passwords are checked whether to upgrade them on every login.	8 years ago
Alex Dik	e5900f7e3c	Fix 6.0.4 merge artifacts	8 years ago
Oliver Günther	513f491256	[23814] Include subprojects in filter ... With #4771, subprojects were no longer included in the query results unless an explicit subproject filter is set. This commit re-enables the `Setting.display_subprojects_work_packages?` check. https://community.openproject.com/work_packages/23814	8 years ago
Oliver Günther	98fdadd02c	Add UserSession model to store user_id in sessions	8 years ago
Jens Ulferts	3246747ae0	adapt to newly introduced query	8 years ago
Jens Ulferts	acd58213e1	rewrite sql string in a arel based query	8 years ago
Jens Ulferts	36c785b7c8	set update_on when recreating content from journal	8 years ago
Jens Ulferts	03c372fd47	use project condition to avoid extra db call	8 years ago
Jens Ulferts	db7bd7e591	use method instead of reprogramming it	8 years ago
Jens Ulferts	8a8dfdd3de	move project allowed query to authorization	8 years ago
Jens Ulferts	ff3ecc9e59	employ sql based user allowed scope for acts as watchable	8 years ago
Jens Ulferts	1ddc142fd3	add sql based query to fetch all users being allowed an action	8 years ago
Jens Ulferts	06c6defa51	replaces ruby based permission check for allowed_to? with sql based query	8 years ago
Jens Ulferts	3ee5c4edb6	clear cache before firing the settings callback ... Otherwise, callback listeners working on the change can not get the current value	8 years ago
Markus Kahl	90868bd579	moved status options module to more appropriate place	8 years ago
Jens Ulferts	b746caa697	eager load cf translations	8 years ago
Jens Ulferts	209169c6f8	start summing up only on summable columns	8 years ago
Jens Ulferts	63ef13fd48	avoid loading whole object when only interested in id	8 years ago
Jens Ulferts	3f85c86f1a	improve performance on wp query working on subprojects	8 years ago
Jens Ulferts	60e95f7541	limit enabled modules subquery to projects of interest	8 years ago
Markus Kahl	35c5a69e6c	rubocop remarks	8 years ago
Markus Kahl	b55b682805	enhanced member screen; members and user table refactoring using cells	8 years ago
Oliver Günther	65c3ebaa2d	Fix specs	8 years ago
Oliver Günther	35fa92c2ff	Fix specs according to title <-> name swap	8 years ago
Oliver Günther	7842fd5a39	Remove unused code	8 years ago
Oliver Günther	4f7c7d4ae9	[23753] Use MenuItem#title to discover the page ... Since WikiMenuItem doesn't provide any other locator other than the title, we can employ `wiki.find_page` to locate the page by title. That title is either matched to the slug, or found by the legacy redirect introduced with 6.0.1. This still feels weird, but without an explicit column or accessor to the page, there's not much we can do while keeping compatibility. https://community.openproject.com/projects/openproject/work_packages/23753	8 years ago