Commit graph

24 commits

Author SHA1 Message Date
Marcin Lulek
ffb80aaa1a security: use 404 instead of 403 in case missing permissions for comment deletion.
- prevents resource discovery
2017-06-20 19:39:19 +02:00
Marcin Lulek
e919908333 security: make sure the admin of repo can only delete comments which are from the same repo.
- fixes IDOR issue
- protects against other people comment deletion by repo admins.
2017-06-19 21:15:37 +02:00
Marcin Kuzminski
926a79e98e audit-logs: implemented pull request and comment events. 2017-06-17 15:22:50 +02:00
Marcin Kuzminski
10162bb050 cleanup: imports cleanup. 2017-06-14 11:23:27 +02:00
Marcin Kuzminski
5915f38fcf pull-request-api: updated logic of closing a PR via API call.
- consistent logic via web and API
- updated events
- updated proper close checks.
2017-06-13 00:14:21 +02:00
Marcin Kuzminski
9c43777217 commit-page: show unresolved TODOs on commit page below comments. 2017-02-01 13:09:54 +01:00
Marcin Kuzminski
a24ca60752 comments: fixed compare view comments. 2017-01-11 14:03:18 +01:00
Marcin Kuzminski
caee47148f comments: skip already deleted comments and make sure we don't raise unnecessary errors. 2017-01-11 14:02:34 +01:00
Marcin Kuzminski
6ccb2377c3 comments: enabled resolution for general comments, and finalized how general comment is build 2017-01-10 23:51:49 +01:00
Marcin Kuzminski
24ef7171f8 comments: add comments type into comments. 2017-01-11 14:46:29 +01:00
Marcin Kuzminski
b52808ca95 comments: renamed ChangesetCommentsModel to CommentsModel to reflect what it actually does.
It's not limited to Changesets/Commits.
2017-01-09 17:52:00 +01:00
Marcin Kuzminski
828c060bdd comments: changed signature of create method of ChangesetComment.
- use commit_id instead of revision
- add placeholder for comment_type
2017-01-09 17:46:53 +01:00
Marcin Kuzminski
f26ac86e28 comments: properly show version of pull request into added comments.
- index them by numeric index instead of DB id
- show inside main comments a version in which they were made.
2017-01-08 21:49:26 +01:00
Marcin Kuzminski
89e2586781 templating: use .mako as extensions for template files. 2017-01-04 22:13:57 +01:00
Marcin Kuzminski
fcc027c282 license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00
Marcin Kuzminski
3761402390 pull-requests: updated versioning support.
- each pr version connects invalidated comments to it
- in version list we show number of comments made on each version
- show all outdated comments even for deleted files
- linkify outdated comments to first one
- added auto-collapse of commit range if they are more than 5
- styling changes, wide mode improvements
2016-12-30 12:11:15 +01:00
Marcin Kuzminski
1d37334326 inline-comments: added helper to properly count inline comments. 2016-12-06 00:18:07 +01:00
Daniel Dourvaris
c5cdd9695a diffs: add new diffs to pull request page 2016-11-25 11:14:04 +02:00
Daniel Dourvaris
7497abf26d diffs: fix bug where relevant pull request comments were not being
shown on single changeset page, fixes #4311
2016-11-25 08:18:36 +02:00
Daniel Dourvaris
e97cb5ad1e diffs: add comments to changeset diffs 2016-10-28 10:39:55 +03:00
Daniel Dourvaris
d1a7921cfc diffs: add repo_name as parameter of diffset - fixes bug
where comparing different target/source repos had wrong diff links
2016-10-28 09:42:19 +03:00
Daniel Dourvaris
ea3308928c changeset: add new diffs to changeset controller 2016-10-26 17:57:23 +03:00
Marcin Kuzminski
1b62606fc2 emails: added new tags to status sent
- make this distinct colored tags for quick status catch
- pass in the status type together with label to the notifiactions and templates
- fixed some UI issues on emails
2016-08-03 15:21:38 +02:00
Marcin Kuzminski
9a0d8c0b77 project: added all source files and assets 2016-05-24 15:56:53 +02:00