688 Commits (a8bf086356e7bdd668c21dc20451ed4f982cbc97)

Author	SHA1	Message	Date
Oliver Günther	02d44331af	Add ws/http connect_src to dev mode only	7 years ago
Roman Roelofsen	ec3728ac14	working dev mode	7 years ago
Wieland Lindenthal	27c73d90a4	First batch of changes required by review.	7 years ago
Oliver Günther	e208a1e437	Run stage on activation as well	7 years ago
Oliver Günther	3c0690b710	Ensure authentication stage is registered during reload ... And just for good measure, ensure stages cannot register the same name twice (does not happen while reloading, but still...)	7 years ago
Markus Kahl	2ac652efcd	user consent WIP	7 years ago
Oliver Günther	e7b43349a8	Append correct toolbar depending on markdown/wysiwyg/textile	7 years ago
Oliver Günther	0bc22be618	Ensure session cookie receives secure flag in https ... When users enable https in their instance, the session cookie should be `secure` by default. It currently is only when the configuration `rails_force_ssl` is set. https://community.openproject.com/wp/268331 [ci skip]	7 years ago
Oliver Günther	450b0fc13d	[27763] Ensure session cookie receives secure flag in https ... When users enable https in their instance, the session cookie should be `secure` by default. It currently is only when the configuration `rails_force_ssl` is set. https://community.openproject.com/wp/268331	7 years ago
Oliver Günther	e77aae007b	Rename PlanningElementTypeColors => Colors and add autocomplete	7 years ago
Wieland Lindenthal	36644257cc	Web custom menu items together with tree menu	7 years ago
Wieland Lindenthal	6293836582	WIP: ... - Tree menu component. - Static Wiki main menu start page - Main menu items of type `partial` - Wiki tree menu partial in main menu	7 years ago
Wieland Lindenthal	03a039e9c2	Main menu with submodule navigation	7 years ago
ulferts	f46b7bc42c	remove members restriction from view_members (#6268) ... That way, an admin can decide to allow users having the non members or anonymous role to see members in a project. [ci skip]	7 years ago
Oliver Günther	579f8bc233	Create new beta build	7 years ago
Oliver Günther	5da004491c	Remove https from default-src ... [ci skip]	7 years ago
Wieland Lindenthal	e5fca5fa65	Limit where crowdin can communicate to. ... Works in Chrome but not in FF.	7 years ago
Oliver Günther	dd5d9e1a19	Move crowdin CSP into separate helper to override CSP at runtime ... This avoids having cdn.crowdin.com allowed in the script-src even if the user doesnt use in-context translations.	7 years ago
Wieland Lindenthal	a6f88f552f	Add vimeo as allowed frame-src for introductional video (#6227) ... [ci skip]	7 years ago
Oliver Günther	e2d7c7b070	Allow crowdin in-context with CSP, but add opt-out ... Since the crowdin iframe adds all sorts of assets, we will want to disabled that.	7 years ago
Jens Ulferts	9b2fec0e24	bump rails to 5.1	7 years ago
Oliver Günther	33eeb8c0df	Allow sameorigin iframe for help modal ... We may want to remove that	7 years ago
Oliver Günther	8c477e5860	Fix more project settings related specs	7 years ago
Oliver Günther	ab4f9b7ed5	Replace settings and boards remotes with actual responses	7 years ago
Oliver Günther	6762b85d0b	Add vendored ckeditor builds for easy building an linking	7 years ago
Oliver Günther	07f92b911a	Allow unsafe-eval for Angular JIT	7 years ago
Oliver Günther	06472450c6	Implement CSP with secure_headers gem	7 years ago
Wieland Lindenthal	503502fa12	rubocop stuff and cleaning up code	7 years ago
Wieland Lindenthal	90ba46d406	Gem name changed from ‚text_extractor‘ to ‚plaintext‘	7 years ago
Wieland Lindenthal	a5808c5b45	- Use initializer to load text-extractor config. ... - Support OCR for image attachments.	7 years ago
Wieland Lindenthal	f2ebad3915	WIP: attachment search	7 years ago
Oliver Günther	88a5e787ce	CKEditor5 config and bundle for OP	7 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Jens Ulferts	b0fed3768d	turn into enterprise feature	7 years ago
Jens Ulferts	a86b711b94	add custom actions to admin menu	7 years ago
ulferts	c88b0b85c4	return proper WWW Authenticate header on missing credentials (#6150) ... An anonymous_fallback is introduced and registered to be the last strategy for warden. That strategy will always apply and it will always return the anonymous user. The better way would be to only apply the strategy if login is not required. That way we would still be able to return a 403 when credentials are missing but would no longer need to have 401 handlers outside of warden. That duplicity caused the missing header in the first place. It would however require us to handle the realm in the strategy and by that increase the coupling between the strategy and the application. [ci skip]	7 years ago
Oliver Günther	78fe1ca1bf	[26921] Reload query on clicking on menu item (#6136) ... * reload query on clicking on menu item * Implement menu factory in typescript * Fix specs and add new spec for refreshing current query * Fix specs * Use transition, not $stateChangeStart * Remove stateChangeStart listener * Remove $statChangeSuccess and vendored code * Fix typescript references * Actually remove ui-router deprecated module * Only clear notifications when notify is false This flag is deprecated, but we're still depending on it * Send keys to body instead * Replace label spec with values around today line Otherwise, labels may be invisible for the browser * Updated shrinkwrap * Fix specs for FF 58 [ci skip]	7 years ago
ulferts	8c732b9a42	Fix/parent depth first sorting (#6133) ... * maintain hierarchy path for performant sorting * by default - only sort by parent Parent sorting is exclusive as the sorting used is depth first. Because of that, the id of the work package is always part of the parent order criteria. By that, all other properties of the work package become irrelevant. [ci skip]	7 years ago
Oliver Günther	177f4e8963	Remove APIV2 and project associations / reportings ... [ci skip]	7 years ago
Oliver Günther	a0150fffa0	Remove timelines	7 years ago
Oliver Günther	7edb849859	[26862] Ensure AWS provider key is uppercase (#6119) ... * Bump carrierwave * Ensure AWS provider is set as uppercase [ci skip]	7 years ago
Oliver Günther	3facc5851d	[26829] Patch reform-rails to use activerecord i18n_scope (#6105) ... The validator passed to AM::Error does not use the `i18n_scope` we define on either Reform::Form or the model, but is delegated from the included AM::Translations module. This in turn causes I18n to lookup the scope `:activemodel`, failing the localization. https://github.com/trailblazer/reform-rails/issues/56 https://github.com/trailblazer/reform-rails/pull/35 [ci skip]	7 years ago
Jens Ulferts	690e0ffc60	wp create/update/destroy via services	7 years ago
Jens Ulferts	6fdd122534	merge wp tree and relations into typed_dag ... Instead of having the tree/hierarchy information for work packages and the relations between the work packages separated into two tables all the information is now stored in the relations table. To support this, the typed_dag plugin is used. Notable changes: * relations_to and relations_from are swapped. relations_to has all relations that point to another work package (from_id = work_package.id) and relations_from contains all relations that lead to the work package from another one (to_id = work_package.id). This change is merely in the code. The db information is left untouched. * For follows/precedes to_id and from_id are swapped in the db. Because of that, "follows" is now the canonical name instead of "precedes". This is done so that hierarchy relations and follows relations point into the same direction which allows to easily detect cyclic relationships that would lead to infinit scheduling. * the columns `root_id`, `lft`, `rgt` do no longer exist in the wp table. * the column `relation_type` does no longer exist in the relations table. * For every type of relation a column (integer) does now exist in the relations table (e.g. hierarchy, block, follow) * Separate associations exist for every type of relation into two directions. E.g. Work packages following the current one can be accessed via `work_package.precedes`	7 years ago
Henriette Dinger	a27bb5d85d	[26426] Move Project table from admin area to global Project list page (#5975) ... * Replace project list with table from admin area * Remove 'projects' from admin area * Handle permissions for project table * Add/Adjust tests * Add description and mark own projects * Add dropdown menu to table * Fix broken tests * Include review feedback * Include other review feedback * show info section for admins only * Change info icon for chevron icon for expanding and collapsing description * Move expand and collapse icon behind more-menu * Remove icon for hierarchy and improve paddings for descriptions * Always show more-menu on mobile * Expand and collapse project filters * Fix capybara feature for archiving projects to collapsed filters * Fix specs: Readd the origin detection for copying projects. * Allow for expanding and collapsing all descriptions at the same time * Improve accessibility for collapsing and expanding the project description	7 years ago
Oliver Günther	cf55f61e73	Don't register textile formatters in initializer (#5903) ... When the autoloader reloads WikiFormatting, the values registered in the initializer are lost [ci skip]	7 years ago
Oliver Günther	a0ab4ddccc	Fix deprecation in rack-attack	7 years ago
Oliver Günther	d3904ab8d2	[24842] Show attribute group for different project contexts (#5839) ... * Add currentProject service to detect the project context * Handle project context in single view * Fix global work package menu * Fix link to project id in single view [ci skip]	7 years ago
ulferts	4b76af2521	guard attribute help texts by ee token (#5786) ... The tokens are always queryable via the api but the administration requires an enterprise token to be set [ci skip]	7 years ago
ulferts	c0b709530c	Fix/replace deprecations (#5533) ... * replace alias_method_chain * remove deprecation silencing * bump controller-testing * introduce permitted params for settings * replace various deprecations in controllers * remove deprecation silencing for legacy_specs * remove `puts` from spec * replace deprecated access to errors * remove unnecessary AR::Parameters usage in spec * specify error to expect * replace deprecations * replace deprecated action calls in legacy function specs * replace deprecations in functional controller tests * replace deprecations in controllers/controller_specs * remove params parser which does not seem to be in effect It is registered for the content type :exclude which makes no sense as it should deal with :json. The desired behaviour of the api dealing with parsing errors is working with or without the code. * replace deprecations in unit specs * replace alias_method_chain [ci skip]	7 years ago