363 Commits (f648b4329b2494e0352bf2dd8f245507054fdf9c)

Author	SHA1	Message	Date
Jens Ulferts	f648b4329b	fix custom field column name validity evaluation	10 years ago
Jens Ulferts	482c47f69b	improve handling of desired columns	10 years ago
Jens Ulferts	bb96e430b6	code harmonization	10 years ago
Jens Ulferts	af61e00a78	moves methods into module	10 years ago
Jens Ulferts	3ead11f6b0	refactor column handling into own method	10 years ago
Jens Ulferts	ebff32c9e4	moves custom field detection to own method	10 years ago
Jens Ulferts	27874eb5b1	shortens sorting	10 years ago
Jens Ulferts	35dfd82d85	remove unnecessary block	10 years ago
Jens Ulferts	96ec53907c	only load required columns	10 years ago
Jens Ulferts	745acd932a	eager loading of required columns - too many for now	10 years ago
Jens Ulferts	f52bbf40ec	move some controller logic into a decorator ... This is by no means clean yet, but better than it was before.	10 years ago
Jens Ulferts	4c2fd2a87d	removes n+1 query for custom_values on wp#index	10 years ago
Hagen Schink	922c10e4bf	Update query only if query string is available ... This prevents inadvertently overwriting an existing query's properties if a query string value is missing. See the comment for a complete justification.	10 years ago
Jens Ulferts	2a6f756570	read column_sums ... In 1513a19 I removed column_sums expecting it to be unnecessary. Turns out it is not.	10 years ago
Philipp Tessenow	fe359984e9	no need to check for performed? in exp.api wp-controller	10 years ago
Philipp Tessenow	611c268fec	simplify index action on exp.api work_packages_controller	10 years ago
Philipp Tessenow	374817219f	return a 404 when accessing a not-viewable query via the experimental API	10 years ago
Hagen Schink	486595d8ef	Add comments to explain implementation in detail	10 years ago
Hagen Schink	658f9400da	Improve implementation	10 years ago
Hagen Schink	9821c8e301	Use 'changed' variable for if statement	10 years ago
Hagen Schink	04571227b3	State action explicitly	10 years ago
Hagen Schink	dc5cff4cbc	Recognize filter changes correctly	10 years ago
Hagen Schink	ddbfa616ab	Extract 'update' handling	10 years ago
Hagen Schink	5356861e8a	Use ActiveRecord::Dirty to get changes on query	10 years ago
Jens Ulferts	d7486ab811	allows api v2 types controller accessible for :view_work_packages permission	10 years ago
Hagen Schink	c496f404a5	Consider difference between update/(de-)publicize	10 years ago
Jens Ulferts	cd65f449dd	removes classes that should have been deleted in #4817547	10 years ago
Hagen Schink	ef039b32ec	Correct query deletion verb on server side	10 years ago
Jens Ulferts	f86b894e11	protects agains query manipulation via API	10 years ago
Jens Ulferts	18eda62459	reuse query link allowance evaluation	10 years ago
Jens Ulferts	f7d92b156e	fixes permission links on query	10 years ago
Jens Ulferts	4817547d4a	introduces policies ... The pattern used here is taken from pundit although this here does by far not have the functionality pundit offers.	10 years ago
Jens Ulferts	61c05affd4	checks for permission before api/v2/types#index	10 years ago
Philipp Tessenow	1dd7eff8ce	don't overwrite public flag for queries AFTER security check	10 years ago
Jens Ulferts	077e0b2f78	types controller is admin only now	10 years ago
Jens Ulferts	01d2569225	allows version selection for global filtering	10 years ago
Mihail Maxacov	a0631745de	fix saved queries don't update wp lists correctly when removing filters	10 years ago
Jens Ulferts	5c06dda316	users allowed new statuses no longer receive an edit menu entry ... They are not allowed to call the work_package#edit action anyway	10 years ago
Jens Ulferts	1513a19b84	readd experimental controllers and add authorization to them	10 years ago
Jens Ulferts	3c730ef131	enforces authorization for experimental api	10 years ago
Michael Frister	f88443714e	API v2: Document some useless code	10 years ago
Michael Frister	8d08e71ed5	API v2: Change boolean value to use true/false ... While this is not the OpenProject API, we use true/false for other APIs and for other parameters in the application, like `layout=false`. true/false also seems more intuitive.	10 years ago
Jens Ulferts	f91256fef9	remove no longer required experimental controller	10 years ago
Jens Ulferts	e98997d1a4	groups as filter value in wp#index	10 years ago
Jens Ulferts	befb9f054e	removes unnecessary visibility filter on Version scope ... Authorization is handled an project level here and thus does not need to be done for the version itself. Authorising on the Version in addition has the drawback to only return versions in projects which the user can see work packages in. It does not take into account that the version can be shared.	10 years ago
Jens Ulferts	2f8920f3c7	minor code improvements	10 years ago
Michael Frister	959c4ba405	API v2 PE index: Allow disabling parent rewiring ... Allow disabling rewiring - this exposes parent IDs of work packages invisible to the user. When requesting single work packages via IDs, the rewiring fails as it assumes that all visible work packages are loaded, which they might not be. For a work package with a parent visible to the user, but not included in the requested IDs, the parent_id would thus be nil. Disabling rewiring allows fetching work packages with their parent_ids even when the parents are not included in the list of requested work packages. There's also a case when rewiring is not used at all: When not providing a project id and requesting via /api/v2/planning_elements.json?ids=[...]. In this case parent_ids were and are always shown. This is pretty inconsistent, but that's the way API v2 is. Btw, planning_elements.json returns 404 when not giving an ids parameter. Apparently, the way custom fields are returned is also different between the general planning elements endpoint and the project-specific one. I didn't look into this, though.	10 years ago
Hagen Schink	218e7dbd96	Implement version ids filter	10 years ago
Hagen Schink	eec14f6113	Remove show endpoint	10 years ago
Hagen Schink	e3506bcb14	Aggregate projects for shared versions	10 years ago