Commit graph

1955 commits

Author SHA1 Message Date
Marcin Kuzminski
246fee9026 api: security, fix problem when absolute paths are specified with API call, that would allow
forking of path based repos if paths are known to end users.
2018-03-28 21:56:23 +02:00
Marcin Kuzminski
e44afd3961 release: Start preparation for 4.11.5 2018-02-21 11:01:30 +01:00
Marcin Lulek
91f7f89973 auth: fix regression on cache manage namespace generation in case of external plugins a new users. 2018-02-21 10:39:13 +01:00
Marcin Kuzminski
53d424ca9a release: Start preparation for 4.11.4 2018-02-18 13:10:25 +01:00
Marcin Kuzminski
b5b6c94fc2 ssh: fix problems with backend and ssh clones. 2018-02-18 12:24:44 +01:00
Marcin Kuzminski
4b5baaabb1 caches: use individual namespaces per user to prevent beaker caching problems.
- especially for mysql in case large number of data in caches there could be critical errors storing cache, and thus preventing
users from authentication. This is caused by the fact that we used single namespace for ALL users. It means it grew as number of users grew
reaching mysql single column limit.
This changes the behaviour and now we use namespace per-user it means that each user-id will have it's own cache namespace fragmenting maximum column data to
a single user cache. Which we should never reach.
2018-02-15 17:34:09 +01:00
Marcin Kuzminski
314abace57 reviewers: fixed logic with wildcard match for branches. 2018-02-15 23:52:31 +01:00
Marcin Kuzminski
da66919c5e release: Start preparation for 4.11.3 2018-02-13 21:46:42 +01:00
Marcin Lulek
fd2df2bafd pull-requests: fixed cases with default expected refs are closed or unavailable.
- for Mercurial with closed default branch a compare across forks can fail.
- fixes #5436
2018-02-12 16:37:57 +01:00
Marcin Kuzminski
1059058baa release: Start preparation for 4.11.2 2018-02-08 20:56:00 +01:00
Marcin Kuzminski
6b097d69a6 sec: serialize the repo name in repo checks to prevent potential html injections. 2018-02-07 22:57:10 +01:00
Marcin Kuzminski
db73f0fdd2 diffs: in case of text lexers don't do any HL because of pygments newline
conversion

- split fix for non-standard file endings, e.g only \r
- fixes #5422
2018-02-07 15:03:42 +01:00
Marcin Kuzminski
a73ab53409 webhook: fixed extra variable replacement. 2018-02-06 16:35:46 +01:00
Marcin Kuzminski
df3eed9bb2 meta: fix write condition for meta file. 2018-02-05 13:21:37 +01:00
Marcin Kuzminski
7df839f11f release: Start preparation for 4.11.1 2018-02-01 20:48:21 +01:00
Marcin Kuzminski
c42da475ac audit-logs: handle query syntax in whosh query parser.
- fixes #5431
2018-02-01 19:17:35 +01:00
Marcin Kuzminski
b16521f1c3 simplevcs: allow passing config into repo detection logic.
- allows proper check for repos together with requirement checks for Mercurial
2018-02-01 18:51:00 +01:00
Marcin Kuzminski
fe5628ee44 mercurial: fix new 4.4.X code change that does strict requirement checks.
in few cases we init bare repos for checking, and we should use defauls that
always work.

- fixes #5433
2018-02-01 18:25:24 +01:00
Marcin Kuzminski
8e1c8a63ca models: drop unused is_valid method. 2018-02-01 17:58:57 +01:00
Marcin Kuzminski
7525f053e7 i18n: Update compiled message objects and js i18n files 2018-01-30 18:07:47 +01:00
Marcin Kuzminski
0991d89de7 i18n: Pulled translation from Transifex 2018-01-30 18:07:19 +01:00
Marcin Kuzminski
97891af1c2 i18n: Updated message catalog template 2018-01-30 18:06:38 +01:00
Marcin Kuzminski
61506dad1b translation: update translation file 2018-01-30 17:38:25 +01:00
Marcin Kuzminski
ada388ee9a permissions: fix problem with permissions reset to None for cases when user
group had same ID as default user.
2018-01-30 13:52:50 +01:00
Marcin Kuzminski
77c30a5643 default-reviewers: fixed edit mode when creating new entries. 2018-01-30 06:01:19 +01:00
Marcin Kuzminski
e12af2ef40 processes: add a way to control processes via gunicorn control.
- allows web based adding/removing workers
2018-01-29 22:08:52 +01:00
Marcin Kuzminski
c36b8f3d79 git: use force branch checkout to prevent cases when .gitattributes modifies
files by specific rule and then checkout is blocked by potential file conflicts.
2018-01-29 14:37:03 +01:00
Marcin Kuzminski
0bc9813397 git: allow force checkouts for git repository 2018-01-23 22:06:41 +01:00
Marcin Kuzminski
5c4f5f9f2c process-management: enable auto-refresh to track usage live. 2018-01-29 17:47:25 +01:00
Marcin Kuzminski
565d2d984a tests: fixed clone url tests. 2018-01-29 17:13:24 +01:00
Marcin Kuzminski
5d8ed27c02 ssh: don't show the SSH clone url if ssh is disabled 2018-01-25 18:14:41 +01:00
Marcin Kuzminski
9c22bde88e ui: allow selecting and specifing ssh clone url.
- fixes #5340
2018-01-25 14:20:08 +01:00
Marcin Kuzminski
f3528cb4ab user-account: expose membership of user groups to users.
- for review rules this might come in handy
- it's not a secret information about which groups user belongs too
2018-01-24 17:14:34 +01:00
Marcin Kuzminski
90120e6678 authentication: introduce a group sync flag for plugins.
- we'll skip any syncing on plugins which simply don't get any group information
- we let plugins define if they wish to sync groups
- prevent from odd cases in which someone sets user groups as syncing, and using regular
plugin. In this case memebership of that group would be wiped, and it's generaly bad behaviour.
2018-01-24 16:47:06 +01:00
Marcin Kuzminski
909d2098e5 pull-requests: prevent from errors in generating a title in repositories which have
only 1 reference.
2018-01-23 23:08:45 +01:00
Marcin Kuzminski
ce187718c6 db-models: fix missing JsonRaw import. 2018-01-22 19:08:16 +01:00
Marcin Kuzminski
93a93bbb19 scm: added push options for Mercurial and Git to allow remote repository sync. 2018-01-22 18:15:51 +01:00
Marcin Kuzminski
c0a9856496 api: fixed problem with setting repo group description via API.
- fixes #5423
2018-01-22 16:17:33 +01:00
Marcin Kuzminski
510069fa98 age: use local flag to fix the problem of wrongly reported last update times on repository groups.
- fixes #5341
2018-01-22 12:53:12 +01:00
Marcin Kuzminski
7a8360b80a dashboard: show date of commit inside the tooltip. 2018-01-22 12:43:03 +01:00
Marcin Kuzminski
c12b41fff7 metadata: store workers and prevent to excesive metadata writes. 2018-01-22 11:30:32 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
727fa48941 pull-requests: allow opening PR from changelog based on selected refs for git as well as hg. 2018-01-19 13:13:38 +01:00
Marcin Kuzminski
631b9e691d reviewers: colorify the groups 2018-01-18 19:04:48 +01:00
Marcin Kuzminski
6f2703e4af default-reviewers: introduce new voting rule logic that allows
defining vote rules for user groups assigned to the default reviewers.

- allows to set per number votes on user groups
- group reviewers by groups
- store the rules and show them in the UI
- fixes #5409
2018-01-19 12:38:25 +01:00
Marcin Lulek
b0d09dc6e5 files-source: allow making a range selection with shift on file lines. 2018-01-19 14:02:37 +01:00
Marcin Lulek
15fff6dafd repository: fixed a bug when scoped token was attached to repository, admins were unable to remove that repository. 2018-01-19 13:20:42 +01:00
Marcin Kuzminski
2fa2b0ba09 pull-requests: don't report abort type of ajax requests as errors. 2018-01-18 18:55:39 +01:00
Marcin Kuzminski
a923fc7303 pull-requests: use proper validation of pull request title to prevent from bad errors. 2018-01-18 15:12:17 +01:00
Marcin Kuzminski
d9a39181bf ssh: update docs based on feedback. 2018-01-17 00:32:34 +01:00