58 Commits (da5153cfad7f08d23fdacbaa6a47fd28903a601b)

Author	SHA1	Message	Date
Markus Kahl	4a295f2a9a	fixed update form	8 years ago
Markus Kahl	9f0123a703	query update and query update form wip	8 years ago
Markus Kahl	48591e9bbd	allow initialising the query form also via get params	8 years ago
Markus Kahl	9e79d02d8f	queries create and create form api endpoints	8 years ago
Jens Ulferts	4c32d17ede	add query form stub - not production ready	8 years ago
Jens Ulferts	73e9173755	add default query endpoint for project	8 years ago
Jens Ulferts	0382fa0ed6	add default query endpoint globally	8 years ago
Jens Ulferts	b25b266cbf	reduce duplication	8 years ago
Jens Ulferts	c4bef2247d	adding filter instance schemas	8 years ago
Jens Ulferts	46bc6e96f1	linking to available projects when embedding a query schema	8 years ago
Jens Ulferts	74770c6a63	adding query schema - global query	8 years ago
Jens Ulferts	27362f785a	embed filters as objects	8 years ago
Jens Ulferts	58df267bc4	link to sort_bys	8 years ago
Jens Ulferts	9cb9096491	link to group_by	8 years ago
Jens Ulferts	3f2c0e6a3d	link to column names	8 years ago
Jens Ulferts	80c242dd53	embed query results in query representer ... This is only done when the representer is not embedded itself, e.g. when it is part of a collection.	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Jens Ulferts	fd91c1ee2c	eager load to reduce n+1 queries ... not all models can be loaded. In particular project#all_work_package_custom_fields prevents eager loading	8 years ago
Jens Ulferts	a52c8ee07d	allow for filtering the queries in the API v3 ... Only implements the `project` filter for now which can be used to differntiate between queries from specific projects and can also be used to specify that the client is only interested in global queries	8 years ago
Jens Ulferts	b3848c879b	grant access to API v3 GET queries also for manage_public_queries	8 years ago
Jan Sandbrink	f6a7595839	Add list actions for queries	8 years ago
Jan Sandbrink	e742f50df1	Allow deletion of queries via APIv3	8 years ago
Jan Sandbrink	6e9ed008fb	Enforce passing of current_user into representers ... Thereby permission checks will no longer silently fail if no user was passed. This uncovered a lot of places where we actually expected a user to be passed, when it wasn't. This was especially true for collections. The basic idea is, that virtually all representers could change their behaviour based on the current user. Representers where this is not the case (e.g. Digest), can still explicitly opt-out.	9 years ago
Jan Sandbrink	cc45136701	refactor 404 auth error ... no separate method needed, let authorize_by_policy behave like well known auth methods (accepting a block)	9 years ago
Jan Sandbrink	bc36704611	allow to get queries via APIv3 ... - one of those missing endpoints - adapted resource spec to be closer to other resource specs - specified error behaviour (missing permissions) -> change: not being allowed to see a query results in 404	9 years ago
Alex Coles	a6212fb304	Fix syntax (w/Rubocop) in lib code ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	57618b25ec	Replace dynamic finder usages with #find_by, etc. ... This patch replaces all dynamic finders, for the sake of consistency, although only some methods are deprecated. See: https://github.com/rails/activerecord-deprecated_finders#active-record-deprecated-finders * Revert some `User#find_by_login` usages in cuke steps accidentally removed in 74228b59. User Story # 20325 Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Jan Sandbrink	a9e9881c4f	style	10 years ago
Jan Sandbrink	b1ba33c75b	specify classes explicitly rather than implicitly ... This is a new try for the APIv3 classes, we either: - FULLY qualify a class and let the autoloader do the rest - don't qualify at all, but require the class explicitly Thus we do not (yet) completely give up on the rails autoloader, but we circumvent a fair amount of its magic (and problems). The hope is to eliminate the following problems in development mode: - NameErrors because the autoloader infers the wrong prefix - "object is not missing constant" errors occuring more rarely Let's see how that turns out to work...	10 years ago
Jan Sandbrink	f0863f9d53	allow to patch existing API endpoints	10 years ago
Jan Sandbrink	a72ea0d5af	more consequently use route_param ... this seems to be the GRAPE-iest way possible	10 years ago
Alexander Bach	d895b82db6	Some minor style fixes	10 years ago
Alexander Bach	bd1ffaee10	Fix authorize usage	10 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 ... [ci skip]	10 years ago
Hagen Schink	db8bfba3af	Remove usage of reform from API V3	10 years ago
Alex Coles	45297523c2	Fix syntax (w/Rubocop) in lib code ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Hagen Schink	3c9d4df9de	Fix TODO syntax	10 years ago
Michael Frister	a6ebb6c4c4	API v3: Query: Fix empty name on starring ... When a query only has special characters as a name (which is not user- visible), normalization previously would remove all of them so the name could be empty. Using a random name fixes this.	10 years ago
Hagen Schink	e1418b5b29	Add TODO for replacing authorization in API v3 query endpoint	10 years ago
Jens Ulferts	f86b894e11	protects agains query manipulation via API	10 years ago
Alex Coles	1adc886ab6	Remove unnecessary Composition in QueryModel ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	92e8384266	Add missing Copyright headers in lib (API) code ... [ci skip] Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	0bf314f149	Specify a custom Formatter for hal+json ... This avoids having to explicitly call #to_json: https://github.com/intridea/grape#api-formats Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Marek Takac	3771625fd0	Updated API authorization method & activity resource spec	10 years ago
Marek Takac	4043f265ee	Fixed paths to modules	10 years ago
Alex Coles	348420a03f	Revert "Feature/api work package embedded activities"	10 years ago
Marek Takac	a240d79256	Fixed paths to modules	10 years ago
Marek Takac	33382223a7	Named params for API authorize method	11 years ago
Marek Takac	6eb061c01e	Simplified #star endpoint	11 years ago
Marek Takac	88b1c64b26	Allowed for admin to star / unstar any query	11 years ago