Commit graph

23 commits

Author SHA1 Message Date
Marcin Kuzminski
d4eb900e5e app: use simpler way to extract default_user_id, this will be now registered at server
boot.
2020-05-07 15:28:20 +02:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Daniel Dourvaris
96fa4e0bdc py3: remove usage of basestring 2019-01-22 23:06:49 +01:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00
Marcin Kuzminski
ecb77c7c3d tests: added tests for permission update views to catch obvious form errors. 2018-07-02 12:20:44 +02:00
Marcin Kuzminski
ada388ee9a permissions: fix problem with permissions reset to None for cases when user
group had same ID as default user.
2018-01-30 13:52:50 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
1d332c03ad pylons: fixed code and test suite after removal of pylons. 2017-11-16 18:27:09 +01:00
Marcin Kuzminski
5f9ae2ae11 pylons: remove pylons as dependency
- dependencies: bumped:
 -setuptools-scm==1.15.6
 -celery==4.1.0
 -kombu==4.1.0
 -pytz==2017.3
 -Routes==2.4.1

Removed all pylons components. Refactored the code to use only pyramid
parts
2017-11-15 13:42:54 +01:00
Marcin Kuzminski
b82576778b issue-trackers: enforce a http or / patterns to avoid JS injections. 2017-11-09 19:42:19 +01:00
Marcin Kuzminski
116099638b apps: switch import of ADMIN_PREFIX from routing into base app.
- routing is deprecated and will be soon removed
2017-11-07 14:17:26 +01:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid
- added new event data with added/removed/changed permissions
- cleanup code and spelling
2017-08-31 12:47:19 +02:00
Marcin Kuzminski
4a9be66cd1 dependencies: bumped pyramid-debugtoolbar to 4.3.1 2017-07-12 22:55:39 +02:00
Marcin Kuzminski
17a42739e8 repo-permissions: moved permissions into pyramid.
- fix issues when added new perms changed those already in the form
- fixed issue with default user overriding permissions when private repos where turned on.
- Two above are not security issues, but rather making the behaviour more consistent.
2017-05-05 16:04:16 +02:00
Marcin Kuzminski
b4b97b1b4e repo-creation: validate and forbid creating .git suffixed repository names.
- because of git-lfs support, and also becuase to support the clone of git bare repositories
we cannot allow creating such repositories.
2017-04-18 12:23:14 +02:00
Marcin Kuzminski
fcc027c282 license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00
Marcin Kuzminski
198c6fda61 gists: use colander schema to validate input data.
- brings consistent validation acros API and web
- use nicer and stricter schemas to validate data
- fixes #4118
2016-07-31 20:11:12 +02:00
Marcin Kuzminski
2687022328 repos, repo groups, user groups: allow to use disabled users in owner field.
This fixes #3374. There's no good benefit of having possibility to prevent
setting disabled user from beeing an owner.
It can happen that we start preperating a system and use disabled accounts.
Also users shouldn't be forbidden to edit settings on an disabled owner.
2016-06-18 02:03:43 +02:00
Johannes Bornhold
dc4d6b278b authn: Adapt authentication plugins validator to allow legacy plugins.
- We use the prefix 'py:' for legacy plugins
- Users are now able to insert plugin ID's like 'py:rhodecode.mylegacyplugins.plugin_one'
- Validator tries does an import and checks if the plugin has a 'includeme' attribute.
2016-06-06 13:35:58 +02:00
Johannes Bornhold
834ce812c6 authn: Allow users to store plugin ID's starting with the legacy plugin prefix. 2016-06-06 11:25:22 +02:00
Johannes Bornhold
a44e92e154 authn: Fix form validation of authentication plugins.
- Check if plugin exists.
- Display an apropriate error message if it doesn't exist.
2016-06-03 11:22:13 +02:00
Marcin Kuzminski
cba71c524a logging: improve how we log user lookup 2016-06-03 01:07:00 +02:00
Marcin Kuzminski
9a0d8c0b77 project: added all source files and assets 2016-05-24 15:56:53 +02:00