engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
3001 commits 1 branch 0 tags 110 MiB
Commit graph

3001 commits

This branch
This branch
All branches
Author SHA1 Message Date
Marcin Kuzminski
64c3bb956a docs: update API documentation 2018-09-04 13:19:12 +02:00
Marcin Kuzminski
7d1a7f916e docs: updated packages. 2018-09-04 09:04:16 +02:00
Marcin Kuzminski
ba60720ffb docs: added release notes for 4.13 2018-09-04 09:03:12 +02:00
Marcin Kuzminski
68e0fed088 config: updated docstrings in .ini files 2018-09-03 13:43:33 +02:00
Marcin Kuzminski
29c0557c16 forks: prevent XSS in datagrid of forks data. 2018-09-03 12:18:46 +02:00
Marcin Kuzminski
530a133251 pull-requests: added missing escapeMarkup. 2018-09-01 03:04:49 +02:00
Marcin Kuzminski
0df68f78b5 changelog: escape the graph branch name to prevent XSS. 2018-09-01 02:50:29 +02:00
Marcin Kuzminski
28c2aa07bb file-renderer: escape alt text to prevent XSS on binary files with bad filenames. 2018-09-01 02:38:56 +02:00
Marcin Kuzminski
4c799d9d63 bleach: moved clean out of the catch context, so we no longer allow sanitizer to be bypassed. 
- in addition we bumped bleach to fix the error that allowed bypass
 2018-09-01 01:53:20 +02:00
Marcin Lulek
bdc82ab735 permissions-summary: skip branch permission entries that are leaking private repository names, and fix counters. 2018-08-31 13:25:02 +02:00
Marcin Kuzminski
9d34384bc9 user: forbid manage of emails for external accounts. 
- e.g LDAP accounts shouldn't allow to add additional emails.
 2018-08-31 12:56:34 +02:00
Marcin Kuzminski
51215261f4 branch-permission: css/ui changes. 2018-08-31 10:12:28 +02:00
Marcin Kuzminski
174038ef3a branch-permissions: fixed override of default permissions for branches from admin page 2018-08-30 15:23:08 +02:00
Marcin Kuzminski
006ba27699 branch-permissions: added missing ee feature screenshot for admin page 2018-08-30 15:04:20 +02:00
Marcin Lulek
db4b2e05bc configurations: update attached configuration INI files with the ENV_ substitution infomation. 
In addition show better error message if substitution cannot be made.
 2018-08-30 13:42:26 +02:00
Marcin Lulek
c1c8c93ea6 exception-tracker: add show-more link. 2018-08-30 12:05:26 +02:00
Marcin Kuzminski
eb911610bd branch-permissions: handle cases for revoking regular permissions when branch permissions are set: 
- DB cascade delete fliushing branch when repository is deleted
- forbid lowering permissions if it's used for branch
 2018-08-30 00:47:01 +02:00
Marcin Kuzminski
fb99ae6dec ce: added example branch permissions screen for CE pages 2018-08-29 23:43:28 +02:00
Marcin Kuzminski
08d3f6b83b branch-permissions: enabled branch permissions checks for SSH backend. 2018-08-29 16:41:52 +02:00
Marcin Kuzminski
6458ef9105 pull-requests: add merge validation to prevent merges to protected branches. 2018-08-28 20:24:40 +02:00
Daniel Dourvaris
16bc6cc415 permissions: unified looks and buttons on permission pages. 
- new quick menu for some super-admin actions. e.g show permissions link
 2018-08-28 14:50:45 +02:00
Marcin Kuzminski
d3afc86451 branch-permissions: handle vcs operations and branch permissions. 
- use new exceptions for branch permissions
- detect if we need to check permissions
- calculate super-admin the same way as regular users for override capabilities
- added new tests for branch permissions
 2018-08-29 20:22:43 +02:00
Marcin Kuzminski
77f19f237a files: added branch permissions checks into web edit operations. 2018-08-28 05:41:54 +02:00
Marcin Kuzminski
888fbe646e branch-rules forbid removal of permissions assigned. 2018-08-22 17:53:59 +02:00
Marcin Kuzminski
07006254e0 permissions: add links to permissions summary for each permission pages 2018-08-22 16:06:52 +02:00
Marcin Kuzminski
e41725c078 branch permissions: added logic to define in UI branch permissions. 
- db models
- new permissions pages placeholders
 2018-08-28 13:41:30 +02:00
Marcin Kuzminski
8676434a71 error-tracker: use nicer display for exception generated by rhodecode. 2018-08-24 15:49:02 +02:00
Marcin Kuzminski
a55becaad1 ssh: improve logging, and make the UI show last accessed date for key. 2018-08-29 14:06:51 +02:00
Daniel Dourvaris
8a80d9dc4d repo: re-order creation/fork forms for better UX and consistency. 2018-08-28 19:13:42 +02:00
Marcin Kuzminski
9d51d4f37b select2: use wider search field, better UI. 2018-08-23 18:57:49 +02:00
Marcin Kuzminski
4bec4980b0 caches: fix import of compute_key_from_params function. 2018-08-23 19:17:07 +02:00
Marcin Kuzminski
e7c5cbb270 caches: don't try to delete keys if there aren't any to delete. 
- This is problematic for REDIS backend.
 2018-08-22 13:22:39 +02:00
Marcin Kuzminski
ac8658b574 dependencies: updated graphviz to 0.9.0 2018-08-20 08:55:22 +02:00
Marcin Kuzminski
76903730e5 dependencies: updated setuptools to 40.1.0 2018-08-20 08:55:10 +02:00
Marcin Kuzminski
fbef097fbf dependencies: bumped rhodecode-tools to 0.16.0 2018-08-20 08:54:49 +02:00
Marcin Kuzminski
0d42a57792 configs: update ini files with some minor changes. 2018-08-19 16:09:05 +02:00
Marcin Kuzminski
8510d1ece8 models: fixed spelling. 2018-08-19 11:00:02 +02:00
Marcin Kuzminski
e9e45a7a24 db-upgrade: clean the beaker_cache 2018-08-19 10:59:35 +02:00
Marcin Kuzminski
7ba72e3972 dependencies: added setuptools 2018-08-17 09:33:07 +02:00
Marcin Kuzminski
41e1e2552a dependencies: bumped some loose libraries 
- scandir-1.9.0
- beautifulsoup4 to 4.6.3
 2018-08-17 09:17:01 +02:00
Marcin Kuzminski
5f656f5671 default-reviewers: fixed voting rule calculation on user-group. The previous 
logic took user group even for individual users, thus voting on group wasn't correct
in case of mixed single reviewers + user groups.
 2018-08-17 09:12:28 +02:00
Marcin Kuzminski
78fcfd9416 caches: configure license cache to some default settings. 2018-08-14 10:46:58 +02:00
Marcin Kuzminski
f4af7b92c9 backend: don't support vcsserver.scm_app anymore 2018-08-13 13:04:36 +02:00
Marcin Kuzminski
feb55bb023 config: updated .ini files with cache settings 2018-08-13 10:09:49 +02:00
Marcin Kuzminski
cba3c6089c release: disable check phase for building installation 2018-08-12 11:10:14 +02:00
Marcin Kuzminski
9effaef334 git: use smarter way for checking if repo is empty. This doesn't spam logs with some dulwich exceptions, we shouldn't really care about here.` 2018-08-11 14:20:58 +02:00
Marcin Kuzminski
b1bfdeb6ba caches: enable cache TTL=30s for auth-plugins. 
- mostly due to this gives massive performance gains.
- most of customers choose to use it.
- svn gets *massive* boost from this.
 2018-08-11 21:35:19 +02:00
Marcin Kuzminski
9e8409f5d1 docs: updated section about locale-archive problems 2018-08-11 14:19:07 +02:00
Marcin Kuzminski
bf88165cf3 packages: normalize package emails. 2018-08-10 15:51:22 +02:00
Marcin Kuzminski
b9af4aab18 auth-tokens: abstracted adding token for users into UserModel method for easier usage in scripts, and in future in API. 2018-08-10 15:20:29 +02:00