2864 Commits (d1a53ddcf8c11c312d6c137df1e67da4f3b43c1f)

Author	SHA1	Message	Date
Mihail Maxacov	a0631745de	fix saved queries don't update wp lists correctly when removing filters	10 years ago
Jens Ulferts	5c06dda316	users allowed new statuses no longer receive an edit menu entry ... They are not allowed to call the work_package#edit action anyway	10 years ago
slawa	f8b09545ed	Prevent mass assignment vulnerability	10 years ago
Jens Ulferts	1513a19b84	readd experimental controllers and add authorization to them	10 years ago
Alex Coles	0b941955ce	Fully qualify ::Type class constant ... This fixes a naming collision with AR internals: undefined method `find' for ActiveRecord::AttributeMethods::Serialization::Type:Class Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	7ff6f4fe94	Fully qualify parent class in API v2 Controllers ... This fixes the following issue: Circular dependency detected while autoloading constant Api::V2::ProjectsController Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Jens Ulferts	6cae440a2c	removes no longer needed query menu items controller ... This is now all handled via API.	10 years ago
Jens Ulferts	3c730ef131	enforces authorization for experimental api	10 years ago
Michael Frister	f88443714e	API v2: Document some useless code	10 years ago
Michael Frister	8d08e71ed5	API v2: Change boolean value to use true/false ... While this is not the OpenProject API, we use true/false for other APIs and for other parameters in the application, like `layout=false`. true/false also seems more intuitive.	10 years ago
Jens Ulferts	f91256fef9	remove no longer required experimental controller	10 years ago
Jens Ulferts	e98997d1a4	groups as filter value in wp#index	10 years ago
Jens Ulferts	b9c1da43e1	moves category out of the first two rows of the detail pane	10 years ago
Jens Ulferts	befb9f054e	removes unnecessary visibility filter on Version scope ... Authorization is handled an project level here and thus does not need to be done for the version itself. Authorising on the Version in addition has the drawback to only return versions in projects which the user can see work packages in. It does not take into account that the version can be shared.	10 years ago
Jens Ulferts	2f8920f3c7	minor code improvements	10 years ago
Mihail Maxacov	080f2cb44f	fix personal activity broken	10 years ago
Michael Frister	959c4ba405	API v2 PE index: Allow disabling parent rewiring ... Allow disabling rewiring - this exposes parent IDs of work packages invisible to the user. When requesting single work packages via IDs, the rewiring fails as it assumes that all visible work packages are loaded, which they might not be. For a work package with a parent visible to the user, but not included in the requested IDs, the parent_id would thus be nil. Disabling rewiring allows fetching work packages with their parent_ids even when the parents are not included in the list of requested work packages. There's also a case when rewiring is not used at all: When not providing a project id and requesting via /api/v2/planning_elements.json?ids=[...]. In this case parent_ids were and are always shown. This is pretty inconsistent, but that's the way API v2 is. Btw, planning_elements.json returns 404 when not giving an ids parameter. Apparently, the way custom fields are returned is also different between the general planning elements endpoint and the project-specific one. I didn't look into this, though.	10 years ago
Markus Kahl	61d7fbe34c	spec for menu items with identical names	10 years ago
Markus Kahl	a9e64e04c7	make sure to use unique name for query menu items	10 years ago
Hagen Schink	218e7dbd96	Implement version ids filter	10 years ago
Hagen Schink	eec14f6113	Remove show endpoint	10 years ago
Hagen Schink	e3506bcb14	Aggregate projects for shared versions	10 years ago
Hagen Schink	dfceb77656	Query projects shared versions	10 years ago
Hagen Schink	33cb83aa55	Implement version index with multiple projects	10 years ago
Hagen Schink	d08c0cb34d	Extract methods used for multiple project selection	10 years ago
Alex Coles	515c9dff5b	[wip] Add Versions List, Version API (v2) resource ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Marek Takac	f195262172	Showing category in WP details pane	10 years ago
Hagen Schink	5929d75460	Pagination options are no query parameters	10 years ago
Marek Takac	ea984dfafd	Fixed link to parent WP in the WP table	10 years ago
Richard	96c14046e0	Removed dead code in work packages controller.	10 years ago
Richard	bd6f2ea235	Cleanup wp list controller per Hagen's suggestion.	10 years ago
Richard	72b6e26461	Twist redirect to back url method to work with JSON params.	10 years ago
Richard	1632e5479e	wp update looks for optional back url after update.	10 years ago
Jens Ulferts	32506ccab5	removes no longer required before filter ... The only action requiring the call to assign_planning_elements is the index action. This action receives it's work packages by calling the assign_planning_elements method from other methods.	10 years ago
Jens Ulferts	e4d58b33ab	removes no longer required before filter ... The only action requiring the call to assign_planning_elements is the index action. This action receives it's work packages by calling the assign_planning_elements method from other methods.	10 years ago
Hagen Schink	08c55efd49	Consider ids parameter	10 years ago
Ion Biziiac	d5de2dd5d4	Fix for Possible to see list of types without being logged in	10 years ago
Hagen Schink	6950592a89	Extract WP update details to service object	10 years ago
Christian Ratz	a452abc731	fixes repo auth ... in sys controller	10 years ago
Jens Ulferts	c14718da5a	redirects on successful wp#update	10 years ago
Hagen Schink	24c74ed0cc	Remove duplicates from attributes list ... In production the hook seems to be called several times which causes attributes to be duplicated. This fix prevents that duplicated attributes are passed to the front-end until the main issue is solved.	10 years ago
Hagen Schink	73bcf53683	Allow plug-ins to set displayed properties	10 years ago
Markus Kahl	2ed52b163d	only use exit screen if login is required to view anything at all	10 years ago
Markus Kahl	d6401e79f5	polish	10 years ago
Markus Kahl	89731db2d1	some refactoring; test display of instructions	10 years ago
Hagen Schink	cce653d1e2	Replace unless by if	10 years ago
Markus Kahl	bbd4cad404	fix: #14385 (direct login infinite redirect loop)	10 years ago
slawa	13ceb4edf8	Treat case when no name or identifier was provided	10 years ago
Hagen Schink	9c740f4f2d	Don't use WP because it does not exist for index	10 years ago
Hagen Schink	22184c373e	Use project object extracted by before filter	10 years ago