Commit graph

452 commits

Author SHA1 Message Date
Marcin Kuzminski
f3d3f479b4 code: fixed deprecated octal calls for py3 compat. 2018-11-30 11:49:27 +01:00
Marcin Kuzminski
4dc9d4463e auth: UI changes
- make buttons wider to handle longer names for SAML plugins
- make order of plugins sorted again because it tends to jump arround in order
  without that sorting.
- social is now external auth
2018-11-29 18:15:55 +01:00
Marcin Kuzminski
e8ec810de8 app: disconect auth plugin loading from authentication registry.
- introduce load_all flag used in skip application load time for certain actions
2018-11-26 00:15:05 +01:00
Marcin Kuzminski
0cc2c2c07d code: code cleanups, use is None instead of == None. 2018-11-21 18:05:27 +01:00
Marcin Kuzminski
8d8e2802da core: use application wide detection of invalid bytes sent via URL/GET/POST data. 2018-10-24 12:29:11 +02:00
Daniel Dourvaris
94d74336d1 diffs: introducing diff menu for whitespace toggle and context changes 2018-10-23 17:02:26 +02:00
Marcin Kuzminski
175a9b344e rcextensions: new builtin rcextensions.
- ability to expose output to users from rcextensions
- new docs
- linking to the code makes the tests always check the integrity of rcextensions
- added new hook variables and described them to end users
2018-10-23 11:45:45 +02:00
Marcin Kuzminski
5a37a33119 mailing: switched from homebrew lib to pyramid_mailer with python3 compatability 2018-10-03 18:47:58 +02:00
Daniel Dourvaris
21e7eef112 vcs: don't use deprecated get_changeset[s] methods. 2018-10-03 16:18:06 +02:00
Marcin Kuzminski
1cb99da048 webhook: handle ${commit_id} variable independent from ${branch}.
- in some cases we want non-branched individual commits to be posted.
2018-10-02 21:35:05 +02:00
Marcin Kuzminski
628a59828e exceptions: fixed py3 incompatible calls 2018-10-02 22:48:13 +02:00
Marcin Kuzminski
4da7905b37 vcs: use a real two part name for merge operation.
- expose settings into vcs_settings for easier override later
2018-10-01 13:54:51 +02:00
Daniel Dourvaris
1db967ddb0 tests: fixed some pytest deprecated calls, and warnings. 2018-10-01 12:23:47 +02:00
Marcin Kuzminski
93fe457930 tests: use safer test id generator.
- this should handle pure boolean ids
2018-09-26 15:08:09 +02:00
Marcin Kuzminski
3a43ded6b6 hooks: pass in store_path into env for hooks. 2018-09-26 12:14:37 +02:00
Marcin Kuzminski
2910f510dc repositories: added option to archive repositories instead of deleting them.
- closes #5493
2018-09-25 17:28:11 +02:00
Marcin Kuzminski
39d181f715 repository: add check preventing of removal of repo with attached pull requests.
- fixes #5493
2018-09-25 12:05:44 +02:00
Marcin Kuzminski
5a4a98b40e git: use a fetch_sync based creation of remote repos.
- skips fragile dulwich code that has problems with large repos
- is in sync with logic that does remote fetch
- is faster and more efficient
2018-09-21 13:35:45 +02:00
Marcin Kuzminski
8d4e2dda3a license: update license metadata and generation code 2018-09-20 21:48:08 +02:00
Marcin Kuzminski
9033601562 logging: use lazy parameter evaluation in log calls. 2018-09-13 17:41:35 +02:00
Marcin Kuzminski
f0ff76a829 core: use py3 compatible prints 2018-09-12 09:47:41 +02:00
Marcin Kuzminski
d3afc86451 branch-permissions: handle vcs operations and branch permissions.
- use new exceptions for branch permissions
- detect if we need to check permissions
- calculate super-admin the same way as regular users for override capabilities
- added new tests for branch permissions
2018-08-29 20:22:43 +02:00
Marcin Kuzminski
e41725c078 branch permissions: added logic to define in UI branch permissions.
- db models
- new permissions pages placeholders
2018-08-28 13:41:30 +02:00
Marcin Kuzminski
c218e2a9ea caches: use .refresh() instead of .invalidate()
- .invalidate() does a delete of cached valued under a key, which means
in previous logic we delete, get_or_create, and compute.
- .refresh() is simply replacing exising key with newly computed values, this
creates less locks, and it's faster.
2018-08-03 14:34:33 +02:00
Marcin Kuzminski
f1497f5afd caches: new cache context managers.
- deprecate beaker cache completly
- use new cache decorators from dogpile
- use a proper per cache key invalidation
2018-08-02 18:04:52 +02:00
Marcin Kuzminski
9665179aa5 caches: use new decorator that uses conditional caches skipping dogpile if cache is disabled. 2018-07-14 18:17:42 +02:00
Marcin Kuzminski
23c4d38e15 tests: fixed name generation for shadow repos 2018-07-13 21:02:50 +02:00
Marcin Kuzminski
ec504c9907 caches: use delete_multi for clearing out cache keys.
- This is a safer and more efficient way of purging many keys.
- For file based cache it only opens the DB once
2018-07-13 18:39:52 +02:00
Marcin Kuzminski
84d673d387 caches: use dogpile for sql_cache_short region. 2018-07-12 17:20:03 +02:00
Marcin Kuzminski
a48ab8a32d caches: don't use beaker for file caches anymore 2018-07-06 12:55:13 +02:00
Marcin Kuzminski
ddc445856e caches: rewrite of auth/permission caches to dogpile. 2018-07-05 20:14:33 +02:00
Marcin Kuzminski
f62a1b94f7 tests: don't use md5 for testing crypto for compliance reasons. 2018-07-03 14:30:57 +02:00
Marcin Kuzminski
225757aaf3 hooks: made the callback host configurable.
- This allows easier docker container seperation
2018-07-03 11:57:03 +02:00
Marcin Kuzminski
5b6f79f166 tests: use post for testing webhook at httpbin.org. With recent changes
the previous wasn't stable and relaible.
2018-07-03 11:07:45 +02:00
Marcin Kuzminski
ecb77c7c3d tests: added tests for permission update views to catch obvious form errors. 2018-07-02 12:20:44 +02:00
Marcin Kuzminski
42c80fe075 shadow-repos: use numeric repo id for creation of shadow repos.
- Fixes a problem after rename or move into repository group.
2018-06-21 14:04:06 +02:00
Marcin Kuzminski
27a87da295 config: removed obsolete super_short_term cache definition 2018-06-18 17:22:34 +02:00
Marcin Kuzminski
e0b621ed56 permissions: enable caching by controlling short_term cache settings. 2018-06-15 19:36:19 +02:00
Marcin Kuzminski
560fd7144f tests: move controllers tests to other 2018-06-08 11:58:09 +02:00
Marcin Kuzminski
7d870ea83a mercurial: protocol security updates.
- fixes Mercurial CVE for lack of permissions checking on mercurial batch commands
- more strict checks for permissions, now default to push instead of pull
to be always on safe side.
- decypher batch commands and pick top-most permission to be used
2018-04-25 13:10:52 +02:00
Bartłomiej Wołyńczyk
4637dd151e caching: add option to cache diffs for commits and pull requests.
- new option for vcs settings to enable caching of diffs and commits
- enables auditing of PR after closing it, and removing commits from source repo
- speed up for large PR upto 20x
- reduced memory usage
2018-04-17 18:46:20 +02:00
Marcin Kuzminski
bdf5f0afb6 svn: enable hooks and integration framework execution.
- This change will allow SVN to execute rhodecode integration framework
via executing the builting hooks.
- uses txn_id for svn to provide metadata required via Apache
- Interception of SVN transaction is required to use temporary stores for metadata
- hooks are now part of vcsserver where the install/control logic is stored
2018-04-06 12:44:01 +02:00
Marcin Kuzminski
89d8b3cb21 api: security, fix problem when absolute paths are specified with API call, that would allow
forking of path based repos if paths are known to end users.
2018-03-28 21:56:23 +02:00
Marcin Kuzminski
1f8b60a56a db: ensure migrations are executed and steps are tested 2018-03-05 21:10:03 +01:00
Marcin Kuzminski
caa4a8a15d ldap: remove not used test reference for ldap library 2018-03-01 13:25:17 +01:00
Marcin Kuzminski
a21841488c tests: use more random ports created at start of rc-web server to stabilize the tests. 2018-02-20 14:57:23 +01:00
Marcin Kuzminski
8fc7773140 tests: improved vcs tests 2018-02-20 13:52:44 +01:00
Marcin Kuzminski
d06a62c340 logging: improve consistency of auth plugins logs. 2018-02-19 14:49:21 +01:00
Bartłomiej Wołyńczyk
8ac5cf95aa my-account: security change, added select filed with email from extra emails while editing user profile, now adding extra emails required type password. Task #5386 2018-02-15 18:40:03 +01:00
Marcin Kuzminski
407c0ea407 pull-request-events: expose pr title and uid for commits inside.
- used mostly for jenkins integration functions
2018-02-16 19:22:21 +01:00