3721 Commits (cc935aefd80c57ada2ad951758c92a3510d8d486)

Author	SHA1	Message	Date
Jens Ulferts	6bd3d4a39a	remove association definitions on hourly rate and default hourly rate that are already inherited from rate	13 years ago
Jens Ulferts	250330a2d2	removing duplicate validations on rate, refactoring date is a date validation	13 years ago
Jens Ulferts	cd34ae5fda	assign User.current as author as author of a cost_object at initialization, not on before_validation; removed superfluous before_destroy	13 years ago
Martin Linkhorst	680fe507b6	always sort a project hierarchy by name. fixes #30706	13 years ago
Jens Ulferts	a80b7ee472	deleting the user sets the auhorship of associated cost object to the deleted user	13 years ago
Martin Linkhorst	d6cab37d55	allow custom ordering, jump to first project of the day (which is the last scheduled)	13 years ago
Martin Linkhorst	6db9c7ec30	add per_page option, jump to current date's page if no page is provided, added today link	13 years ago
Martin Linkhorst	2d8c6980eb	added pagination for meetings	13 years ago
Felix Schäfer	2e81aee28b	We don't allways want I18n fallbacks	13 years ago
Martin Linkhorst	804f10da04	more protection against mass assignment, forgot something	13 years ago
Martin Linkhorst	928720f6b6	more protection against mass assignment	13 years ago
Romano Licker	ade3fd1048	enforce date when setting commit_date ... fixes specs	13 years ago
jwollert	4ac6a6d7a2	rebranding mailer stuff to openproject	13 years ago
Jens Ulferts	1c81177c65	move versions left and right	13 years ago
Jens Ulferts	3d4ea2c4cc	split up costlog controller edit into new, create, edit, update ... * fix mass_assignment problem on create * changing routes * will still need more refactoring	13 years ago
Martin Linkhorst	3e034514f6	re-allow mass assignment of assign_to_id of issue categories. but issue category won't be valid unless assignee is also project member of the category. (mirroring what is possible to select in the view) fixes #28790	13 years ago
Romano Licker	d9069356e1	display errors correctly when adding a member to a project ... - when nothing is selected - when a user is missing - when a role is missing	13 years ago
Romano Licker	01f8886a63	fixes: couldn't switch roles on a user & ensure correct ... error handling the remove_member_if_empty callback was executed deleting the member entirely it should not be possible to remove all roles from a member thus we can remove the callback for good the ui now prevents the user from setting no role (raises an error) if he wants to delete a member he can use the delete button which is much more intuitive.	13 years ago
Martin Linkhorst	feaf82c0e8	validate presence of issue in order to get a nice error message + textmate whitespace	13 years ago
Martin Linkhorst	97b5a93bc9	fix mass assignment bug in hourly rates + some whitespace	13 years ago
Felix Schäfer	c2ec12f448	Fix attr_accessible errors	13 years ago
Martin Linkhorst	62b493840e	yay, selected statusis ;) get saved, fixes #28723 partly	13 years ago
Felix Schäfer	9393b42644	Change from attr_protected to attr_accessible	13 years ago
Romano Licker	e2d7bde493	fixing copying of members (while copying a project)	13 years ago
Felix Schäfer	d75043e9ca	protect from mass assignment attacks	13 years ago
Jens Ulferts	ce0bdc8abd	add start_date to save attributes, validate it as date format	13 years ago
Jens Ulferts	3511600c0a	adjust members_controller to work with the protected attributes ... * member received autosave option so that changes can be saved in a single transaction	13 years ago
Martin Linkhorst	284f689bd7	nested tab attributes are safe, one cannot fake project_id, nor wiki_id	13 years ago
Jens Ulferts	d0d84cd992	allowing only principal and role to be mass assigned	13 years ago
Romano Licker	73c087e19c	reset author to current user when copying an issue	13 years ago
jwollert	7bed02534a	fixes updating labor and material item updates so we cannot break out of our projects' bounds	13 years ago
jwollert	19a59cc589	protect ALL the models from mass assignment	13 years ago
Martin Linkhorst	34dbfb2c83	don't use mass assignment for login field, somebody added it to attr_protected	13 years ago
Martin Linkhorst	235fe06944	use safe attributes rather than mass assignment directly	13 years ago
Romano Licker	44f48962bf	automatically fill the parent_id field when duplicating an issue	13 years ago
jwollert	7681d943ad	fixes copying projects	13 years ago
jwollert	105ef24862	fixes creation of member_roles	13 years ago
jwollert	d9f6b52029	protect relations to users (assigned_to, author_id etc.) in models, too	13 years ago
Martin Linkhorst	337561261a	some documentation regarding mass assignment, show full stack trace in console	13 years ago
Martin Linkhorst	696ed97dcd	fix: use the old style #force_attributes	13 years ago
Martin Linkhorst	12bb66c264	refactor dealing with mass assignment	13 years ago
Martin Linkhorst	42bc728288	fix to work with protected :project_id	13 years ago
jwollert	e0a2b9e768	fixes creation of anonymous user. shouldn't mass assign protected attributes (i.e. login)	13 years ago
Martin Linkhorst	1fce5b6a8f	added attr_protected calls to protect mass assignment of :project_id through a view	13 years ago
Jean-Philippe Lang	f5ac69401d	Set user_id as a protected attribute (#922).	13 years ago
Jean-Philippe Lang	a6a95c8617	Prevent mass-assignment vulnerability when adding/updating a wiki (#922).	13 years ago
Jean-Philippe Lang	5c6fbc664b	Prevent mass-assignment vulnerability when adding/updating a version (#922).	13 years ago
Jean-Philippe Lang	42caba0351	Prevent mass-assignment vulnerability when adding/updating a time entry (#922).	13 years ago
Jean-Philippe Lang	676bf0f751	Prevent mass-assignment vulnerability when adding/updating a news (#922).	13 years ago
Jean-Philippe Lang	4156485090	Prevent mass-assignment vulnerability when adding/updating a forum message (#922).	13 years ago