111 Commits (f4837e7a00ca9805aa3c4634daa1122b806e3682)

Author	SHA1	Message	Date
Henriette Dinger	71542e5c74	Hide breadcrumb on myPage (#6055) ... [ci skip]	7 years ago
Oliver Günther	1f2492bb8b	Implement HashedToken (ExtendedToken from MOTP) in Core	7 years ago
ulferts	c0b709530c	Fix/replace deprecations (#5533) ... * replace alias_method_chain * remove deprecation silencing * bump controller-testing * introduce permitted params for settings * replace various deprecations in controllers * remove deprecation silencing for legacy_specs * remove `puts` from spec * replace deprecated access to errors * remove unnecessary AR::Parameters usage in spec * specify error to expect * replace deprecations * replace deprecated action calls in legacy function specs * replace deprecations in functional controller tests * replace deprecations in controllers/controller_specs * remove params parser which does not seem to be in effect It is registered for the content type :exclude which makes no sense as it should deal with :json. The desired behaviour of the api dealing with parsing errors is working with or without the code. * replace deprecations in unit specs * replace alias_method_chain [ci skip]	7 years ago
Oliver Günther	63dae8516f	[25110] My Page: Fix default blocks being enabled	8 years ago
Henriette Dinger	7e1c46a6f7	Hide breadcrub per default and show in admin, my, wikHide breadcrub per default and show in admin, my, wiki	8 years ago
Henriette Dinger	7c11383a82	Move 'my page' to menu on the right	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	fe0e8dd919	Rename before_filter to before_action	8 years ago
Oliver Günther	fff21a1229	UserPasswords: Replace salted SHA-1 with bcrypt ... This adds a typed userpassword class for Bcrypt password hashes that replace the previous default of salted SHA1. It still provides a class for SHA1 passwords, however new passwords of that type may no longer be created directly, and passwords are checked whether to upgrade them on every login.	8 years ago
Oliver Günther	7ecad5e0ca	Make global setting for password confirmation ... Implements a check to request password confirmation only when: 1. `Setting.internal_password_confirmation` is set 2. The user is internally authenticated (`user.uses_external_authentication?` is false) [ci skip]	8 years ago
Oliver Günther	4773ce1f9a	Implement confirmation confern for my/account	8 years ago
Henriette Dinger	e337822715	Refactor menu splitting and project drop down ... This allows us to use the helper to decide when a drop-down node is selected based on its content. Since we do not always pass MenuItems to the render_drop_down_node helper, we unfortunately must pass the selected state of its contents in that case. Also moves project and help helpers into separate modules	9 years ago
Markus Kahl	5324b2cc07	drop my first_login; redirect to work packages if possible	9 years ago
Jens Ulferts	d364d7d418	indentation	9 years ago
Jens Ulferts	8868b3d741	reremove line accidentally readded by merge dc3337a	9 years ago
Mohamed Wael Khobalatte	35693f2940	Re-implement my/page block drag and drop in dragula and jQuery ... We part ways with Protoype's Sortable module, link_to_remote, and some javascript in favor of a tigher implementation using dragula, jQuery, and some js.erb responses. Sorting logic was also simplified; we now merely send the state of the source and the target of the drag&drop to the server where it persists. We no longer make a special case for each of the containers.	9 years ago
Mohamed Wael Khobalatte	a1bf92212d	Fix legacy and cucumber specs failing because of strong params	9 years ago
Mohamed Wael Khobalatte	972b04d86e	Refactor to allow for strong params ... We no longer need attr_accessible.	9 years ago
Jens Ulferts	7eb8bdad53	invert setting for self notification ... Using the positive version to make it easier to understand. In order to avoid having to write a migration, the model layer encapsulates the transformation. Direct assignments to :no_self_notified is still possible.	9 years ago
Jens Ulferts	2596e7be94	fix accidental disabling of no_self_notified ... The "account" and "settings" action used to alter the email settings although the user did not send any information regarding email on the request. To clarify the behaviour, a service has been created	9 years ago
Peter Lehwess	0c7aac1584	Clean up user experiance for generating tokens for the first time	9 years ago
Alexander Bach	e3adae4b14	Move test for token presence into controller method	9 years ago
Alexander Bach	66020c41c2	simplify code ... by allowing more caller trust	9 years ago
Alexander Bach	2cff5e9864	Show user name when forcing password change	9 years ago
Alexander Bach	c5318308ca	Suppress the hound	9 years ago
Alexander Bach	04b6445eaa	Fix password change redirection	9 years ago
Alexander Bach	947f9d8fda	Add save button to mail notifications menu	9 years ago
Alexander Bach	9771528616	Add save button to settings menu	9 years ago
Alexander Bach	0161694c3b	Extract save functionality for new menu saves	9 years ago
Alexander Bach	d3428ad180	Move email notification settings into separate menu	9 years ago
Alexander Bach	b0fd7af830	Move access token configuration from sidebar to separate menu	9 years ago
Alexander Bach	74111e524a	Add and fill Settings menu item	9 years ago
Alex Coles	16bbaba2c1	Fix MyController mass-assignment ArgumentError ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	acd23b8046	Fix missing space around block in MyController ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	ec1bb39f9b	Fix syntax (w/Rubocop) in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	9 years ago
Alex Coles	ae97716087	Make MyController#account use PATCH ... Now routes form helper-generated request correctly. Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	e0191e759c	Update year in copyright header to 2015 ... [ci skip]	10 years ago
Alex Coles	8a28b1a730	Prefer #map over #collect in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	bb0e6e6aa5	Fix syntax (w/Rubocop) in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Alex Coles	336446c59d	Use 1.9+ Hash syntax in (Rails) controllers ... Signed-off-by: Alex Coles <alex@alexbcoles.com>	10 years ago
Philipp Tessenow	c2dafccb8d	Fix wrong redirect after forced pass change ... A new user (`first_login: true`) who is forced to change his password (`forced_password_change: true`) was redirected to the change_password page (instead of my_page) when he didn't get the login credentials right on the first attempt. The `back_url_hidden_field_tag` was added to the password form to persist the original referer (in the case that the first password change attempt does not succeed). This makes the redirect work exactly as if the password change succeeded on the first try.	10 years ago
Markus Kahl	c9a3dd87bd	put #disable_password_login? into OP Configuration	10 years ago
Markus Kahl	a572c6af7f	properly qualify OmniauthLogin everywhere	10 years ago
Markus Kahl	f8770d5e93	block password-related functionality (e.g. lost)	10 years ago
Markus Kahl	c714ac7102	added #reported_work_package_count to user [DRYing]	11 years ago
Jonas Heinrich	162480c6e0	limits reported count to the visible scope of the current user ... limits reported count to the visible scope of the current user	11 years ago
Jonas Heinrich	9a9fd9f235	shows work packages with the correct author	11 years ago
Michael Frister	3c324bdc42	Use strong_parameters for User, remove safe_attribtues	11 years ago
Jonas Heinrich	4ca218a221	refactores displayed number of reported work packages	11 years ago
Johannes Wollert	8b096975fe	updates copyright headers ... updates more copyright more copyright headers	11 years ago