engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2044 commits 1 branch 0 tags 110 MiB
Commit graph

2044 commits

This branch
This branch
All branches
Author SHA1 Message Date
Marcin Kuzminski
034abca8dc ssh: embedded ssh support 
- updated command generation and added debug flag
- updated .ini config to have ALL required components to run SSH commands
- rcssh-wrapper now is embedded and pinned into version of enterprise
- update ssh_support configration
- implements #5343
 2017-08-18 14:32:00 +02:00
Marcin Kuzminski
3ea8958a92 ssh-keys: added admin panel for managing globally all SSH Keys. 
- added also option to manually update the keyfile
- fetch and show all user keys for audit purpose
 2017-08-17 22:46:26 +02:00
Marcin Kuzminski
42f25bce8e docs: updated Apache documentation for serving static files 2017-08-18 14:29:52 +02:00
Marcin Kuzminski
429c3a56cb data-grid-app: added universal function for extracting ordering. 
- now supports format a.b
- supports passing a ref column e.g User.username, get's handy for joined querie
 2017-08-17 22:44:25 +02:00
Marcin Lulek
c681c84320 security: use no-referrer for outside link to stop leaking potential parameters such 
as auth token stored inside GET flags.

- based on hacker-one ticket
 2017-08-17 10:55:07 +02:00
Marcin Kuzminski
aca661a15e goto-switcher: optimized performance and query capabilities. 
- Previous implementation had on significant bug. The use of LIMIT 20
was limiting results BEFORE auth checks. In case of large ammount of similarly
named repositories user didn't had access too, the result goto search was empty.

This was becuase first 20 items fetched didn't pass permission checks and final
auth list was empty.

To fix this we now use proper filtering for auth using SQL. It means we first check
user allowed repositories, and add this as a filter so end result from database is already
to only the accessible repositories.
 2017-08-16 22:46:34 +02:00
Marcin Kuzminski
dcedd44327 auth: added additional name filters to the acl helpers. 
- helps narrowing the results based on if we use a search param or not.
 2017-08-16 21:51:10 +02:00
Marcin Kuzminski
f539d88365 auth: added helpers to fetch IDs of repos/repo groups/user groups that 
user have access to.

- this can be used to do filtering by IDs and do SQL based ACLs
 2017-08-16 14:05:36 +02:00
Marcin Kuzminski
e8ec2b950f goto-switcher: use special commit: prefix to explicitly search for commits. 
- previous solution could make the go-to swticher slow in case of huge search index
- mixing repository names and commit names could lead to bad UX when searching
- explicit case still allows this, but user is in the control how and what he wants to search
- fixes #5375
 2017-08-15 21:33:01 +02:00
Marcin Kuzminski
a02eb262c4 docs: updated enable celery documentation 2017-08-14 17:32:13 +02:00
Marcin Kuzminski
281b30f2c8 dependencies: bumped rhodecode-tools to 0.13.0 with latest .ini templates 2017-08-14 13:34:23 +02:00
Marcin Kuzminski
a2daf294e6 ini: updated small found problems. 2017-08-14 13:33:58 +02:00
Marcin Kuzminski
460ce30227 dependencies: bumped Pyramid to 1.9.1 2017-08-14 12:18:36 +02:00
Marcin Kuzminski
71a5a458fb dependencies: bumped Mako to 1.0.7 2017-08-14 12:18:05 +02:00
Marcin Kuzminski
9f702007c6 dependencies: freeze bleach library version. 
- this is a Jupyter notebooks dependency, and bumps lots of libraries. Better to
have a control over this to be on the safe side
 2017-08-14 12:17:41 +02:00
Marcin Kuzminski
df1f73ec33 dependencies: bumped pandadoc_filters to 1.4.2 2017-08-14 12:15:25 +02:00
Marcin Kuzminski
4b64815bfc dependencies: bumped prompt_toolkit to 1.0.15 2017-08-14 12:14:55 +02:00
Marcin Kuzminski
272735aef3 nix: bumped internal nix file after version bump. 2017-08-14 12:14:26 +02:00
Marcin Kuzminski
239c4fd78d release: Bump version 4.9.0 to 4.10.0 2017-08-14 11:58:00 +02:00
Marcin Kuzminski
79fef17c51 release: merge back stable branch into default 2017-08-14 11:57:47 +02:00
Marcin Kuzminski
173061b9a5 Added tag v4.9.0 for changeset c5a2b7d0e4bb 2017-08-12 21:55:17 +02:00
Marcin Kuzminski
b6850abfdf release: Finish preparation for 4.9.0 2017-08-12 21:55:17 +02:00
Marcin Kuzminski
6b2dc12104 release: updated pip2nix output for 4.9.0 2017-08-12 21:55:15 +02:00
Marcin Kuzminski
ae89e38cf4 release: Start preparation for 4.9.0 2017-08-12 19:55:15 +02:00
Marcin Kuzminski
7347874011 docs: added release notes for 4.9.0 2017-08-12 11:48:49 +02:00
Marcin Kuzminski
0012823054 docs: updated svn configuration to prevent 400 errors on certain Apache versions. 2017-08-12 19:20:06 +02:00
Marcin Kuzminski
0a8d2734f5 repo-maintanance: fix routing problem 2017-08-11 16:29:55 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid. 
- fixed few small found problems
- code cleanups
 2017-08-11 13:00:47 +02:00
Marcin Kuzminski
fadfe2a810 dependencies: added peppercorn to required libraries. 2017-08-11 10:40:42 +02:00
Marcin Kuzminski
a980969e0a repo-groups-grid: remove left over icon. 2017-08-08 21:02:25 +02:00
Marcin Kuzminski
23300965a7 perms: updated perms summary for users 
- expose edit of local (user) settings and global ones
- expose the inherit flag to show if permissions are inherited
 2017-08-08 17:06:58 +02:00
Marcin Kuzminski
ca4306b80b perms: use text labels about given permissions instead of potentially display icon. 
- icon can be misleading becuase lack of it gives no explicit state explanation
- using True/False labels makes more sense
- this is also compliant with UI for people with disabilities.
 2017-08-08 16:27:47 +02:00
Marcin Kuzminski
92e684fe8c bower: fix iron-ajax hash. It was changed in 00b9ddd672fd54fe71c5260b33e58992a166868a, but now it seems to be again changed to old hash. 2017-08-08 13:31:58 +02:00
Marcin Kuzminski
434aca22cf perms-summary: fix long names overflow. 
- fixes #5336
 2017-08-08 13:07:42 +02:00
Marcin Kuzminski
5286b2484f core: added two new commands rcsetup-app and rcupgrade-db that will 
replace pserve equivalents.

- pserver uses some internals from pylons, and we want to remove this.
 2017-08-04 15:42:14 +02:00
Marcin Kuzminski
c18fe82344 core: expose pshell as ipython with RhodeCode imports. 
- will replace soon paster ishell
 2017-08-04 15:15:43 +02:00
Marcin Kuzminski
2b15a05b94 comments: remove usage of pylons global config. 2017-08-04 14:29:09 +02:00
Marcin Kuzminski
c4bfd88b1a configs: added info about @TOKEN syntaxt for whitelist views. 2017-08-04 12:41:17 +02:00
Marcin Kuzminski
68e8c23896 markup: make relative links pint to raw files for images and to standard files as links. 
- allows building relative MD/RST links that go to rendered content
- still allows to embed images/video with relative paths
 2017-08-04 10:54:33 +02:00
Marcin Kuzminski
ff01b29445 markup: allow better lxml import failure detection. 
- in some conditions previous syntaxt could cause errors in first import.
 2017-08-04 00:18:59 +02:00
Marcin Kuzminski
b98b5eaaa8 auth: added @LoginRequired() decorators for user/user_group views. 
- not really a secirity issue but for consistency we should have them (also provides nicer redirects)
 2017-08-03 22:17:38 +02:00
Marcin Kuzminski
c56bb0da4b core: removed usage of global pylons config in base lib. 2017-08-03 21:59:49 +02:00
Marcin Kuzminski
905e6ea6e0 auth: XHRRequired decorator is no longer required. 
- was replaced by xhr=True view config of pyramid
 2017-08-03 21:39:48 +02:00
Marcin Kuzminski
2cc3df1920 users/user_groups: ported permission summary pages into pyramid. 
- added JSON views for extraction of parameters in parasable format.
 2017-08-03 20:18:49 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
d86be7d432 auth_white_list: translate from old style controllers to the new views. 2017-08-03 18:40:48 +02:00
Marcin Kuzminski
bb544cbad6 auth: allow binding the whitelist views to specific tokens 2017-08-03 18:54:52 +02:00
Marcin Kuzminski
945777cf9c ssh: added support for auto generating authorized_keys from stored ssh keys. 2017-08-03 16:36:16 +02:00
Marcin Kuzminski
35cefa9b2d users: added SSH key management for user admin pages 2017-08-03 16:35:13 +02:00
Marcin Kuzminski
15272baace core: deprecated non-existent commands from paster commands. 
- previously registered, they are no longer in use
 2017-08-03 12:19:56 +02:00