Commit graph

87 commits

Author SHA1 Message Date
Marcin Kuzminski
10cf433145 ssh-keys: further sanitize data of inputted SSH keys. 2018-05-16 23:01:46 +02:00
Marcin Kuzminski
3667868099 system-info: added ulimit to system info. 2018-03-30 15:35:55 +02:00
Marcin Kuzminski
c8bd6381f6 user-groups: fix sync flag extraction. 2018-03-30 14:21:15 +02:00
Marcin Kuzminski
beff366341 processes: better handling of PID that are not part of RhodeCode processes.
- in some cases for multiple gunicorn instances the PID sent is not from rhodecode which
would lead to AccessDenied errors. We prevent from crashing the server on this type of errors.
2018-03-28 13:27:03 +02:00
Marcin Kuzminski
3949688b3d api: enable setting sync flag for user groups on create/edit. 2018-03-28 13:27:21 +02:00
Marcin Kuzminski
8d1765a709 user-groups: on admin view redirect links to public profile. We have an explicit
edit button, and this is consistent with user views.
2018-02-22 15:52:39 +01:00
Marcin Kuzminski
a1a6ad26bc automation: add EE feature placeholder 2018-02-21 18:45:52 +01:00
Marcin Kuzminski
67d8bfdbb6 settings-forms: put flash message on validation errors to prevent missing out some field input validation problems. 2018-02-20 14:59:09 +01:00
Marcin Kuzminski
ff858cc9f6 ssh: show fingerprint when adding already existing key.
- help to track why we failed to add a specific key
2018-02-18 12:24:01 +01:00
Marcin Kuzminski
b8619894a6 process-management: use safer way to extract data for processes.
- prevents from unknown PID errors.
2018-02-05 18:45:04 +01:00
Marcin Kuzminski
e12af2ef40 processes: add a way to control processes via gunicorn control.
- allows web based adding/removing workers
2018-01-29 22:08:52 +01:00
Marcin Kuzminski
5c4f5f9f2c process-management: enable auto-refresh to track usage live. 2018-01-29 17:47:25 +01:00
Marcin Kuzminski
9c22bde88e ui: allow selecting and specifing ssh clone url.
- fixes #5340
2018-01-25 14:20:08 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
6f2703e4af default-reviewers: introduce new voting rule logic that allows
defining vote rules for user groups assigned to the default reviewers.

- allows to set per number votes on user groups
- group reviewers by groups
- store the rules and show them in the UI
- fixes #5409
2018-01-19 12:38:25 +01:00
Marcin Kuzminski
ad2c66ddb5 issue-trackers: cache the fetched issue tracker patterns in changelog page before loop iteration 2017-12-07 12:33:11 +01:00
Marcin Kuzminski
a368564cba update: add new async task to check for updates via scheduler.
- save the data into DB for later evaluation
- show in system info that we know the system is outdated
2017-12-04 19:23:55 +01:00
Marcin Kuzminski
79f00ec46a flash: use consistent use of h.flash across the application. 2017-11-16 20:35:50 +01:00
Marcin Kuzminski
6bbab12fcc celery: celery 4.X support. Fixes #4169
- update tasks
- enabled celerybeat to function
- check and cleanup code for 4.X
2017-11-16 19:26:53 +01:00
Marcin Kuzminski
1d332c03ad pylons: fixed code and test suite after removal of pylons. 2017-11-16 18:27:09 +01:00
Marcin Kuzminski
5f9ae2ae11 pylons: remove pylons as dependency
- dependencies: bumped:
 -setuptools-scm==1.15.6
 -celery==4.1.0
 -kombu==4.1.0
 -pytz==2017.3
 -Routes==2.4.1

Removed all pylons components. Refactored the code to use only pyramid
parts
2017-11-15 13:42:54 +01:00
Marcin Kuzminski
b82576778b issue-trackers: enforce a http or / patterns to avoid JS injections. 2017-11-09 19:42:19 +01:00
Marcin Kuzminski
9c110539e0 admin: ported settings controller to pyramid.
- NavList dropped pyramid flag as it's pure pyramid now
2017-11-09 15:40:31 +01:00
Marcin Kuzminski
661d12e10f partial-renderer: use package resource format for templates.
- it's faster then lookup
- doesn't require any special configuration changes
2017-11-07 22:28:14 +01:00
Marcin Kuzminski
4336119cb0 views: load template context for XHR views.
- We use partial renderer and this requires the call_context to be initialized.
- Helps the Pyramid porting to be finished
2017-11-07 14:15:24 +01:00
Marcin Kuzminski
e6fa851ff8 db: prevent empty IN queries that generally are performance problem, and triggers sql warnings. 2017-10-17 20:32:23 +02:00
Marcin Kuzminski
69a865a7a3 repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
Marcin Kuzminski
b326189910 repo-forks: security, fix issue when forging fork_repo_id could allow reading
other people forks.
2017-10-15 18:54:52 +02:00
Marcin Kuzminski
a00cc457a9 ssh-keys: expose last access time on admin summary page for SSH keys. 2017-09-27 22:21:04 +02:00
Marcin Kuzminski
a9fc01d079 repo-auth-tokens: UX, set and disable to VCS scope if selected an repo from select2 2017-09-21 20:12:13 +02:00
Marcin Kuzminski
b505377197 users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
Marcin Kuzminski
b95e835ebb audit-logs: allow showing individual entries for audit log. 2017-09-21 16:47:10 +02:00
Marcin Kuzminski
cb071ab951 user-groups: use request partial renderer and not the pylons one. 2017-09-20 20:18:53 +02:00
Marcin Kuzminski
0fd76867b6 auth-tokens: allow specifing custom expiration date manually.
- fixes #5323
2017-09-08 18:03:35 +02:00
Marcin Kuzminski
e8fe72ebfb admin: cleanup imports. 2017-09-08 12:49:41 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid
- added new event data with added/removed/changed permissions
- cleanup code and spelling
2017-08-31 12:47:19 +02:00
Marcin Kuzminski
ee20d401c8 users: changed spelling of users_groups to user_groups. Because English :] 2017-08-29 15:46:26 +02:00
Marcin Kuzminski
ebbfb35adf user-group: perms summary, fix view name. 2017-08-25 10:11:32 +02:00
Marcin Kuzminski
7c571b29bc ssh: fixed tests for disabled ssh support 2017-08-20 20:48:10 +02:00
Marcin Kuzminski
3ea8958a92 ssh-keys: added admin panel for managing globally all SSH Keys.
- added also option to manually update the keyfile
- fetch and show all user keys for audit purpose
2017-08-17 22:46:26 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid.
- fixed few small found problems
- code cleanups
2017-08-11 13:00:47 +02:00
Marcin Kuzminski
b98b5eaaa8 auth: added @LoginRequired() decorators for user/user_group views.
- not really a secirity issue but for consistency we should have them (also provides nicer redirects)
2017-08-03 22:17:38 +02:00
Marcin Kuzminski
2cc3df1920 users/user_groups: ported permission summary pages into pyramid.
- added JSON views for extraction of parameters in parasable format.
2017-08-03 20:18:49 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
945777cf9c ssh: added support for auto generating authorized_keys from stored ssh keys. 2017-08-03 16:36:16 +02:00
Marcin Kuzminski
35cefa9b2d users: added SSH key management for user admin pages 2017-08-03 16:35:13 +02:00
Marcin Kuzminski
42117ffb8e user-group-admin: use a proper auth filter.
- we now use an full sql based perm check based on an earlier fetch of allowed IDS
- fixes problem with sql limit/filter and later filterint that by auth.
- can be optimized later
2017-07-29 22:44:25 +02:00
Marcin Kuzminski
ab192470e0 process-management: dont rely on vcsserver code. 2017-07-28 01:24:06 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00