265 Commits (b70f073a73d9f2919fc85272e473ea4236ac55ee)

Author	SHA1	Message	Date
Michael Frister	673c620306	Begin to replace OpenID with omniauth ... Only UI yet is a link on the dedicated login page, a lot of OpenID remains are still in there and things are absolutely not secure or nice.	11 years ago
Michael Frister	0c338e042a	Remove attr_protected on User now that we use strong_parameters	11 years ago
Michael Frister	3c324bdc42	Use strong_parameters for User, remove safe_attribtues	11 years ago
Alex Coles	d872d91d0d	Fix typos, spelling in model comments ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	11 years ago
Richard	3ec128d246	Made a rudimentary attempt at loading query if id is given. ... had to put some stuff back into work packages controller again sorry Till.	11 years ago
Richard	53d5ad231e	WIP. having fun with authorisation.	11 years ago
Richard	c81777decd	Made a rudimentary attempt at loading query if id is given. ... had to put some stuff back into work packages controller again sorry Till.	11 years ago
Richard	1b3a367077	WIP. having fun with authorisation.	11 years ago
Johannes Wollert	8b096975fe	updates copyright headers ... updates more copyright more copyright headers	11 years ago
Hagen Schink	957b96855f	Uses will_change! to signal options modification	11 years ago
Nils Kenneweg	855617fb11	replace user-id in timelines options w/ deleted user id	11 years ago
Hagen Schink	d2c0293215	Implements API's workflows controller	11 years ago
Nils Kenneweg	e76b4f69c4	fix user deletion regarding new timelines stuff. ... nullify responsibles in wp/projects. do not break timeline configs when an object does not exist.	11 years ago
Christian Ratz	f8426244d7	Reactivate accessibility css ... - Added setting to turn accessibility mode on/off for not logged in users	11 years ago
jwollert	e11b87fb71	don't extend pagination model in user.rb, just use the stuff defined in principal.rb	11 years ago
jwollert	0bcab2069e	select2 autocompletion for projects' responsible	11 years ago
Martin Czuchra	9b8e1aad51	Revert "remove usage of eval() in User#name" ... This reverts commit 18a66e9601. Conflicts: doc/CHANGELOG.md	11 years ago
Philipp Tessenow	18a66e9601	remove usage of eval() in User#name	11 years ago
Philipp Tessenow	444546e2e8	use \A and \z instead of ^ and $ in ruby regexes	11 years ago
Jens Ulferts	feb5f46228	removes scopes also present on the superclass	11 years ago
Hagen Schink	1cb831877b	Renames issue category to category	11 years ago
Jean-Philippe Lang	3f0a7fa15d	Ability to assign issues to groups (#2964). ... Option is disabled by default. It can be turned on in application settings. Conflicts: app/controllers/reports_controller.rb app/models/issue.rb app/models/issue_category.rb app/models/mail_handler.rb app/models/project.rb app/views/issue_categories/_form.rhtml app/views/settings/_issues.rhtml config/locales/bg.yml config/locales/bs.yml config/locales/ca.yml config/locales/cs.yml config/locales/da.yml config/locales/de.yml config/locales/el.yml config/locales/en-GB.yml config/locales/en.yml config/locales/es.yml config/locales/eu.yml config/locales/fa.yml config/locales/fi.yml config/locales/fr.yml config/locales/gl.yml config/locales/he.yml config/locales/hr.yml config/locales/hu.yml config/locales/id.yml config/locales/it.yml config/locales/ja.yml config/locales/ko.yml config/locales/lt.yml config/locales/lv.yml config/locales/mk.yml config/locales/mn.yml config/locales/nl.yml config/locales/no.yml config/locales/pl.yml config/locales/pt-BR.yml config/locales/pt.yml config/locales/ro.yml config/locales/ru.yml config/locales/sk.yml config/locales/sl.yml config/locales/sr-YU.yml config/locales/sr.yml config/locales/sv.yml config/locales/th.yml config/locales/tr.yml config/locales/uk.yml config/locales/vi.yml config/locales/zh-TW.yml config/locales/zh.yml test/functional/issues_controller_test.rb test/unit/issue_category_test.rb Conflicts: app/models/issue.rb app/models/user.rb config/locales/de.yml test/functional/issues_controller_test.rb test/unit/issue_test.rb	11 years ago
Philipp Tessenow	a1e67dd460	new copyright header #1903	11 years ago
Martin Czuchra	d7b21f38ef	Removes more Issue occurances. ... This also resolves some old TODOs for when Issues are finally removed.	11 years ago
Christian Ratz	43bc798abb	changed feed setting to enabled instead of disabled	11 years ago
Christian Ratz	b86f8d65d7	[#1850] Disable atom feeds via setting	11 years ago
Martin Czuchra	0542551ac0	Moves mail options out into seperate constants.	11 years ago
Michael Frister	489213e4c9	Fix LDAP authentication	11 years ago
Hagen Schink	a3551ec8be	Moves user update to journal manager	11 years ago
Christian Ratz	0f64ceb50d	changed check for default admin account ... - works now with deleted default admin user - with disabled default admin user - added specs	11 years ago
Michael Frister	1a848ee2f5	Add password expiry check ... Conflicts: doc/CHANGELOG.md	11 years ago
Michael Frister	69566d1e5c	User: Always force password change on random password assignment	12 years ago
Michael Frister	05c85dcb90	User update: Use strong_parameters, disallow status change	12 years ago
Michael Frister	0f1be97449	Fix authentication with external auth source	12 years ago
Michael Frister	19155db133	Allow disabling brute force prevention	12 years ago
Michael Frister	9a5cefaf11	User index: show status and allow filtering by status	12 years ago
Michael Frister	d01ec32b3d	Block user on too many failed logins within specific period	12 years ago
Michael Frister	234ff1e50e	Password reused warning: Improve singular ... [skip ci]	12 years ago
Michael Frister	35e2e43a56	Fix users index status filtering, status_name now returns string	12 years ago
Michael Frister	430e6cbde7	Refactor user statuses, add status_name method	12 years ago
Michael Frister	f884fbf4c2	Add option to prevent former passwords from being reused ... Squashed from single commits: * Add checks to prevent former passwords from being reused * Make number of banned former passwords configurable Also group settings into fieldsets on the authentication settings page. * Update TestUnit fixtures with UserPasswords * Add migration for creating user passwords * Fix new user password not being immediately used * Add cuke for ban of former passwords * Fix admin info showing whether admin password was changed * Fix password check for user without password and fix tests * Fix password complexity feature after translation changes * Adapt my_controller_spec to UserPasswords * Order UserPasswords by id created_at is not unique within one second, this breaks MySQL tests. id is guaranteed to be unique and monotonically increasing on MySQL and on Postgres(at least as long cache is not set for the sequence). * Rename secure_compare to secure_equals? * Immediately use reduced number of banned former passwords Only check number of former passwords as defined in settings. The number of stored passwords per user is only reduced when a user updates the password. * Add missing copyright notices * Update changelog	12 years ago
Michael Frister	501a2fecbb	Make old migration salting existing user passwords independent of User ... Remove code from user, remove test and adapt migration.	12 years ago
Sebastian Schuster	423152fa06	Fixed the uninitialized constant exception ... caused by the user class being loaded first in a pure core configuration in development	12 years ago
Sebastian Schuster	6d8eb89d53	Removed function to preload circular dependencies ... since it is not always running first to load the dependencies (see Bundler.require in application.rb), therefore explicitely requiring the dependencies in the files loads classes in the correct order no matter which is loaded first	12 years ago
Michael Frister	7ba90102a7	Add option to force a user to change password on next login ... * Add force_password_reset field to user * Add force_password_reset field to user edit form Also, reindent the form HTML. * Rename force_password_reset to force_password_change * Force password change: Show form on login, allow change * Remove unused step definitions for setting RAILS_ENV * Fix forced password change, add cuke * Don't reveal whether user exists when not authenticated * Also add spec for testing reaction when user is not allowed to change the password. * Improve force password change code after review * Fix MyController password test and change to spec * Fix AccountController force password change spec	12 years ago
Michael Frister	089db98541	Improve password complexity requirements ... Add a new Passwords module, which evaluates and generates passwords. Adapt User to use this module. In addition to checking the length, the module verifies that a password contains a certain number of character classes like uppercase/lowercase. These classes can be configured in the authentication settings. Also increase the default minimum password length from 4 to 10.	12 years ago
Jens Ulferts	21459a384f	provide every possible file with a short copyright notice ... This was done using the rake task: rake copyright:update	12 years ago
Christian Ratz	7ee079fa65	added SystemUser ... - sometimes we need an existing user eg. for migrations - it is possible to execute a block in the context of this SystemUser	12 years ago
Christian Ratz	54a78a37f7	changed user#random_password ... - new random password generation - moved random_password test to spec	12 years ago
Christian Ratz	045ae8c9dc	fix user create with empty pwd ... - fixed wrong condition in users pwd validation methode	12 years ago