engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1704 commits 1 branch 0 tags 110 MiB
Commit graph

212 commits

Author SHA1 Message Date
Marcin Kuzminski
23f3d5fbdf audit-logs: introducing new audit logger for actions. 
- api v2
- gathers more actions such as dump of user/action data
 2017-04-26 23:19:45 +02:00
Marcin Kuzminski
335ffaa6fd users: personal repo-group shouldn't be available for default user. 2017-04-25 08:38:38 +02:00
Marcin Kuzminski
dabc592890 pull-request: fixed typo in wrong ref type error, and added which 
refs are actually allowed.
 2017-04-24 16:36:28 +02:00
Marcin Kuzminski
aa53b82e49 vcs-settings: moved creation of largefiles default dirs into vcs settings view. 
- couldn't find a better place to do this
- check is cheap, and moving it out from AppStart to here makes more sense
- users need to enable largefile form this view, so enforcing defaults dirs
makes most sense right here in this view.
 2017-04-20 23:56:32 +02:00
Marcin Kuzminski
0b80fe66c9 pull-request-reviewers: added option to add reviewers by picking an user group for pull requests. 
- fixes #5228
 2017-04-19 17:30:07 +02:00
Marcin Kuzminski
a3ed262ffd users: moved get_users from RepoModel to UserModel. 2017-04-19 16:58:38 +02:00
Marcin Kuzminski
b595153ea8 user-groups: moved get_user_groups from RepoModel to UserGroupModel. 2017-04-19 16:52:24 +02:00
Marcin Kuzminski
7515b25253 comments: remove helper to render a comment object. 
- we always use helper renderer, and for consistency we should stick with that.
It makes refactoring, and general use much harder. DB objects should have least
possible logic inside.
 2017-04-20 14:04:15 +02:00
Marcin Kuzminski
81cfa0f585 core: added ops view to pyramid to have a PING command with pure pyramid. 2017-04-19 15:32:57 +02:00
Marcin Kuzminski
b4b97b1b4e repo-creation: validate and forbid creating .git suffixed repository names. 
- because of git-lfs support, and also becuase to support the clone of git bare repositories
we cannot allow creating such repositories.
 2017-04-18 12:23:14 +02:00
Marcin Kuzminski
4ae1367cb3 users: last_activity should be null if user haven't performed any actions. 2017-04-12 23:24:48 +02:00
Marcin Kuzminski
6bb3bd78bb user-log: change version default to v1 as currently we only use old format. 2017-04-12 10:52:13 +02:00
Marcin Kuzminski
01ba8bee6d user-journal: prepare new datastructure for v2 of user logs. 
- fixes #5259
 2017-04-11 22:20:10 +02:00
Marcin Kuzminski
afe887cf7e pull-requests: change the update commits logic to handle target changes better. 
- references #5266
- don't create comments if NO changes in PR were detected, but target changed
- Show the origin of changes target/source repos
- Allows updating the diffs without invalidating voting and creating new versions.
 2017-04-05 16:39:32 +02:00
Marcin Kuzminski
98f97b18fd user-groups: added info, and new panel to control user group synchronization. 
- allows to check status of user-group and if it's going to be sync-ed via
  external plugins.
- allows to set manual synchronization for already existing RhodeCode Groups.
 2017-04-05 14:20:30 +02:00
Marcin Kuzminski
71c08bd00c pull-requests: updates on pull requests that don't have versions shouldn't 
throw any errors.
 2017-04-05 11:33:57 +02:00
Marcin Kuzminski
9f40d6928b pull-request: force update pull-request in case of the target repo reference changes. 
- We should be able to force update a diff if the target repo reference changes. It
will help detect commits that are pushed into the target from the origin.
- Fixes #5266
 2017-04-04 16:38:32 +02:00
Marcin Kuzminski
639508d54b user-api: enable per-user audit logs fetching via API endpoint. 2017-03-28 15:49:20 +02:00
Marcin Kuzminski
4c2e5ee660 pull-request: lock button when updating reviewers to forbid multi-submit. 
- fixed some small UI issues found.
 2017-03-27 15:32:27 +02:00
Marcin Kuzminski
858dfef419 git-lfs: settings for GIT repos to enable git-lfs and set store location 
- ref #4235
 2017-03-21 17:23:28 +01:00
Marcin Kuzminski
aa95986678 mercurial: allow editing largefile store from web interface. 2017-03-17 22:08:34 +01:00
Marcin Kuzminski
a5b6055c00 admin-users: add audit page to allow showing user actions in RhodeCode. 
- this is a helper filter that allows to filter out admin journal for particular user.
- refs #5256
 2017-03-23 13:50:55 +01:00
Marcin Kuzminski
e621d8dd88 api: added last-activity into returned data of get_user api. 
- refs #5256
 2017-03-23 14:50:20 +01:00
Bartłomiej Wołyńczyk
b5ec70cf90 admin-users: add view for user groups managment 
model-repo: get_user_groups modified to return more information about user
model-user_group: 2 new methods added
tests-models: mocked repo test becouse of modifications in model
 2017-03-21 20:51:18 +01:00
Marcin Kuzminski
a487205ee6 users: change last activity to re-use new column. 2017-03-15 12:51:59 +01:00
Marcin Kuzminski
125825da26 users: migrate last_activity column so it's part of user table. 
- allows quicker update
- allows sorting by that column
 2017-03-15 12:50:21 +01:00
Marcin Kuzminski
24dc950561 api: expose more details of auth tokens in get_user api call. 2017-03-08 16:20:44 +01:00
Marcin Kuzminski
4b9baf0fe5 models: allow different exception between pylons and pyramid for get_or_404 view. 2017-03-07 13:50:59 +01:00
Marcin Kuzminski
8732733a54 authentication: enabled authentication with auth_token and repository scope. 
- fixes #3932
- vcs type tokens now with repo scope narrows the usage to a repository.
 2017-03-03 20:48:23 +01:00
Marcin Kuzminski
230ee5f4aa auth-tokens: order tokens by creation id. 2017-03-03 18:24:13 +01:00
Marcin Kuzminski
7dd3a63a11 notifications: skip fetching of settings in notifications. 
- we can re-use the .CONFIG object.
 2017-03-02 10:44:51 +01:00
Marcin Kuzminski
d6dfdba2a8 auth-tokens: fixed tests 2017-02-28 12:49:40 +01:00
Marcin Kuzminski
b1f8bb4212 user: remove usage of api_key. 
- replace builtin one with searching external tokens
- cleanup of code and not have exposed builtin api key
- prevent of setting builtin api key
 2017-02-27 19:22:54 +01:00
Marcin Kuzminski
c2a6fe9138 auth-tokens: add scope and show consitent token UI for my account and admin. 2017-02-27 17:15:55 +01:00
Marcin Kuzminski
10ce5d446b auth-tokens: remove showing builtin tokens 2017-02-27 12:04:43 +01:00
Marcin Kuzminski
bcd1b3ff15 auth-tokens: don't generate builtin token for new users. 
- also don't change them when password reset is made.
 2017-02-27 11:59:13 +01:00
Marcin Kuzminski
ab24af89d2 auth-tokens: disable authenticating by builtin token. 2017-02-27 11:45:30 +01:00
Marcin Kuzminski
73ad8eebf0 auth-tokens: added scope into auth tokens (ApiKeys before refactoring) 
- allows to have scoped tokens, ie. just for single repo.
- fix migration problems found on introducing this change

ref #3932
 2017-02-24 17:48:18 +01:00
Marcin Kuzminski
0ca4b7cbfc password-reset: strengthten security on password reset logic. 
- generate token that has special password reset role
- set 10 minut expiration on the token
- add some sleep to prevent bruteforcing attacks
- use implicit messages to prevent user email discovery attacks
 2017-02-26 21:28:09 +01:00
Marcin Kuzminski
1f65204749 hooks: added new pretx hook to allow mercurial checks such as protected branches, or force push. 2017-02-23 16:53:11 +01:00
Marcin Kuzminski
8c73a665d3 emails: added note types into emails. Fixes #5221 2017-02-17 17:15:05 +01:00
Bartłomiej Wołyńczyk
5b6f560bdb url-parsing: fix for bug #5218, remove not allowed chars from uri 
- Quoting special chars in  uri, instead of removing them.
 2017-02-19 17:43:34 +01:00
Bartłomiej Wołyńczyk
8905708fe6 Fix for bug #4155. Fix, data change only for admin. 2017-02-16 15:56:50 +01:00
Bartłomiej Wołyńczyk
5239136f5b Fix for bug #4155. Modification last change date to add time zone. 2017-02-15 16:46:16 +01:00
Marcin Kuzminski
89dc191e0d pull-requests: add explicit CLOSE pr action instead of closed status from selector. 
- This is much better UX
- we set status based on calculated review
- fixes #5215
 2017-02-15 11:48:54 +01:00
Marcin Kuzminski
5c2c266ee9 auth-tokens: updated logic of authentication to a common shared user method. 2017-02-13 14:36:48 +01:00
Marcin Kuzminski
2ec1d828e5 notifications: fixed translation problem in my notifications. 2017-02-01 15:34:47 +01:00
Marcin Kuzminski
9c43777217 commit-page: show unresolved TODOs on commit page below comments. 2017-02-01 13:09:54 +01:00
Marcin Kuzminski
adca0da138 integrations: fix re-submit of form on repo integrations. 2017-02-01 12:48:49 +01:00
Marcin Kuzminski
33ec213f25 merge-checks: show only username for allowed to merge check. 2017-02-01 12:11:01 +01:00