7 Commits (b4e24a39bcbd2dd34ff3fe0155c58017d35baee8)

Author	SHA1	Message	Date
ulferts	5c112f39e1	fix role api permission checks ... The authorization on the individual get was handled to early (before instead of after_validation) so that the current user wasn`t set correctly yet. Additionally, there was not dedicated authorization check on the index get action	4 years ago
ulferts	6140f4c7e9	update copyright to 2021 (#8925) ... Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded. Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013	4 years ago
Henriette Dinger	bd7f4e4814	Update copyright notice	5 years ago
ulferts	a93ecca5a8	Feature/members api show (#7308) ... * basic members collection response * complete member index end point * document versions#index * remove user association from members There is already a more generic principals association. Having both causes confusion and leads to duplicate loading of models * linting * remove disabled test * add members#show api end point * add project and principal to member representer * replace member.user reference with principal * use principal reference in project members association * modernize roles api * complete member representer rendering * replace remnants of user association * add member schema api endpoint * have dedicated available projects end point for versions * linting * limit roles to assignable ones in schema * rename member to membership in api * remove remnants of user in member * spec fixes * use available_projects endpoint in versions board * add eager loading to memberships#index * members create form api endpoint * ensure role exists for default assignment * extract switch for users/groups to work_packages representer * document membership create form * add l10n expected in specs * strengthen the usage of a delete base service * use base class for set attributes service * fix alias in service * add create endpoint to members api * document members create endpoint * linting * adapt to altered service signature * use default endpoint for wp#get * use CF infused representer [ci skip]	6 years ago
Oliver Günther	1b5fc32366	Avoid before blocks and raw params access for IDs ... Grape's validation runs after a `before` block so we should avoid using raw params there and instead using `declared(params)` which returns only the validated whitelisted params, much like a permitted params hash.	6 years ago
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Jens Ulferts	c4bef2247d	adding filter instance schemas	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Jan Sandbrink	6e9ed008fb	Enforce passing of current_user into representers ... Thereby permission checks will no longer silently fail if no user was passed. This uncovered a lot of places where we actually expected a user to be passed, when it wasn't. This was especially true for collections. The basic idea is, that virtually all representers could change their behaviour based on the current user. Representers where this is not the case (e.g. Digest), can still explicitly opt-out.	9 years ago
Jan Sandbrink	b332ef06aa	make collection representer explicitly unpaginated	9 years ago
Alex Coles	a58650e7c6	Add/update Copyright headers in lib code ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Jan Sandbrink	b1ba33c75b	specify classes explicitly rather than implicitly ... This is a new try for the APIv3 classes, we either: - FULLY qualify a class and let the autoloader do the rest - don't qualify at all, but require the class explicitly Thus we do not (yet) completely give up on the rails autoloader, but we circumvent a fair amount of its magic (and problems). The hope is to eliminate the following problems in development mode: - NameErrors because the autoloader infers the wrong prefix - "object is not missing constant" errors occuring more rarely Let's see how that turns out to work...	10 years ago
Jan Sandbrink	f0863f9d53	allow to patch existing API endpoints	10 years ago
Jan Sandbrink	c7ca71b7e0	add types by project	10 years ago
Jan Sandbrink	b4c50b7c04	relax access to types resource	10 years ago
Jan Sandbrink	832570bf3d	add endpoints to read types	10 years ago
Jan Sandbrink	a72ea0d5af	more consequently use route_param ... this seems to be the GRAPE-iest way possible	10 years ago
Jan Sandbrink	4d9f65db84	return 403 for statuses when not authorized ... this violated the spec and was found during refactoring...	10 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 ... [ci skip]	10 years ago
Hagen Schink	746f7cce74	Use API V3's path helper	10 years ago
Hagen Schink	10ea44dad3	Implement collections specification	10 years ago
Hagen Schink	b4173e76e3	Implement API V3 statuses/:id endpoint	10 years ago
Hagen Schink	2e2d51fd32	Implement WP status update on API V3 WP forms	10 years ago
Hagen Schink	db8bfba3af	Remove usage of reform from API V3	10 years ago
Alex Coles	45297523c2	Fix syntax (w/Rubocop) in lib code ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	c2f3c858be	Minor refactoring of StatusesAPI ... Remove unnecessary ivars, absolute namespacing. Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	0bf314f149	Specify a custom Formatter for hal+json ... This avoids having to explicitly call #to_json: https://github.com/intridea/grape#api-formats Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	8bc23e6afd	Add Status List API resource ... User Story # 14053 (Task # 14078) Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	ddff625e2f	Add Version List API resource ... User Story # 14053 (Task # 14077) Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Marek Takac	4b86ca4387	WIP create available watchers endpoint	10 years ago
Alex Coles	36c8fa0f2b	Move experimental "v3" API to /api/experimental ... Endpoints implemented with Rails Controllers will eventually be removed, in favour of the Grape implementation added in ac2c89c0. Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Richard	a3f2fee391	Assignee's role select has the correct options.	11 years ago
Richard	b4ea4275fe	Added API groups and roles index methods. nothing tested yet:D	11 years ago
Johannes Wollert	8b096975fe	updates copyright headers ... updates more copyright more copyright headers	11 years ago
Philipp Tessenow	a1e67dd460	new copyright header #1903	11 years ago
Martin Czuchra	5cba510b1f	Updates copyright notice in timelines sources. ... This also fixes some of the broken license headers after the previous merge.	12 years ago
Martin Czuchra	46ffcfc195	Refactors current timelines API into api/v2.	12 years ago