3317 Commits (f40ac611baa176d1dbafd27aa1a08c0faac14856)

Author	SHA1	Message	Date
jwollert	4ac6a6d7a2	rebranding mailer stuff to openproject	13 years ago
jwollert	c3bb801a3d	switch branding from chili to open in wiki syntax pages	13 years ago
Romano Licker	422705c5de	fixes attachment partial on windows browsers	13 years ago
Jens Ulferts	47454dd7e5	making successful saving a condition for a success response on member edit	13 years ago
jwollert	068e3048c4	display summary in news#index if we got one. if not, display a short version of the news text	13 years ago
jwollert	65b384db2e	unify issues bulk update form. code for custom fields now looks just like standard issue fields'	13 years ago
Martin Linkhorst	3e034514f6	re-allow mass assignment of assign_to_id of issue categories. but issue category won't be valid unless assignee is also project member of the category. (mirroring what is possible to select in the view) fixes #28790	13 years ago
Romano Licker	d9069356e1	display errors correctly when adding a member to a project ... - when nothing is selected - when a user is missing - when a role is missing	13 years ago
Romano Licker	01f8886a63	fixes: couldn't switch roles on a user & ensure correct ... error handling the remove_member_if_empty callback was executed deleting the member entirely it should not be possible to remove all roles from a member thus we can remove the callback for good the ui now prevents the user from setting no role (raises an error) if he wants to delete a member he can use the delete button which is much more intuitive.	13 years ago
Romano Licker	e2d7bde493	fixing copying of members (while copying a project)	13 years ago
Jens Ulferts	ce0bdc8abd	add start_date to save attributes, validate it as date format	13 years ago
Jens Ulferts	3511600c0a	adjust members_controller to work with the protected attributes ... * member received autosave option so that changes can be saved in a single transaction	13 years ago
Martin Linkhorst	284f689bd7	nested tab attributes are safe, one cannot fake project_id, nor wiki_id	13 years ago
Romano Licker	73c087e19c	reset author to current user when copying an issue	13 years ago
Romano Licker	eaba2414cf	add label "Move issue" for breadcrumb	13 years ago
Martin Linkhorst	fa26c9ceee	remove login explicitly from attributes hash since it is protected	13 years ago
Martin Linkhorst	34dbfb2c83	don't use mass assignment for login field, somebody added it to attr_protected	13 years ago
Martin Linkhorst	235fe06944	use safe attributes rather than mass assignment directly	13 years ago
Romano Licker	44f48962bf	automatically fill the parent_id field when duplicating an issue	13 years ago
jwollert	7681d943ad	fixes copying projects	13 years ago
jwollert	105ef24862	fixes creation of member_roles	13 years ago
jwollert	d9f6b52029	protect relations to users (assigned_to, author_id etc.) in models, too	13 years ago
Martin Linkhorst	337561261a	some documentation regarding mass assignment, show full stack trace in console	13 years ago
Martin Linkhorst	696ed97dcd	fix: use the old style #force_attributes	13 years ago
Martin Linkhorst	12bb66c264	refactor dealing with mass assignment	13 years ago
Martin Linkhorst	42bc728288	fix to work with protected :project_id	13 years ago
jwollert	e0a2b9e768	fixes creation of anonymous user. shouldn't mass assign protected attributes (i.e. login)	13 years ago
Martin Linkhorst	1fce5b6a8f	added attr_protected calls to protect mass assignment of :project_id through a view	13 years ago
Jean-Philippe Lang	f5ac69401d	Set user_id as a protected attribute (#922).	13 years ago
Jean-Philippe Lang	a6a95c8617	Prevent mass-assignment vulnerability when adding/updating a wiki (#922).	13 years ago
Jean-Philippe Lang	5c6fbc664b	Prevent mass-assignment vulnerability when adding/updating a version (#922).	13 years ago
Jean-Philippe Lang	42caba0351	Prevent mass-assignment vulnerability when adding/updating a time entry (#922).	13 years ago
Jean-Philippe Lang	ff5472e6f7	Use safe_attributes= just like in #create. (#922)	13 years ago
Jean-Philippe Lang	676bf0f751	Prevent mass-assignment vulnerability when adding/updating a news (#922).	13 years ago
Jean-Philippe Lang	4156485090	Prevent mass-assignment vulnerability when adding/updating a forum message (#922).	13 years ago
Jean-Philippe Lang	8e6f54c4ec	Prevent mass-assignment vulnerability when adding a project member (#922).	13 years ago
Jean-Philippe Lang	6b25085997	Prevent mass-assignment vulnerability when adding/updating an issue category (#922).	13 years ago
Jean-Philippe Lang	21c498557e	Prevent mass-assignment vulnerability when adding/updating a document (#922). ... Conflicts: app/controllers/documents_controller.rb	13 years ago
Jens Ulferts	df082b5ebf	setting values of attributes not translated to nil ... * doing so enables the fallbacks to work	13 years ago
Jens Ulferts	0c6ddd8030	adding comment	13 years ago
Jens Ulferts	1d1f923306	fixing minor bugs in custom_field: ... * remembering is_required before setting it in validation * no longer YAML.loading for attribute as serialization is handled in the translation table	13 years ago
Jens Ulferts	13813195e9	moving validates_uniqueness_of patch for globalized models into initializers	13 years ago
Jens Ulferts	911682f55c	validate default_value in every provided locale	13 years ago
Jens Ulferts	4e07a913c9	possible_values of custom_fields are now localizable	13 years ago
Jens Ulferts	74c9bc2896	enabling default_value of custom_fields to be localized by admins ... * tabular_form_builder also accepts :single_locale option which will cause the builder to generate a field based on the english localization. There will be no option to add or delete localizations for this field. Doing this means that the field will be equal accross all languages as en is always the default fallback	13 years ago
Jens Ulferts	b8dd70c325	prettifying indentation	13 years ago
Jens Ulferts	7178c1b3b7	enabling name attribute of custom_fields to be localized by admins ... * using globalize2 for backend * overriding some AR methods in CustomField in order for them to work * with globalize ** validates_uniqueness_of works on translations table now. Should not be necessary any more when switching to globalize3 ** translations_attributes setter method as globalize2 does not work with nested_attributes by default * extending the tabular_form_builder to generate localizable attributes * as soon as :multi_locale => true is passed on a field	13 years ago
Felix Schäfer	4d83a94174	use all available languages as default ... Should probably get refactored as a custom I18n backend	13 years ago
jwollert	dc8483b15d	fixes copying projects	13 years ago
jwollert	3eca274548	fixes creation of member_roles	13 years ago