Commit graph

55 commits

Author SHA1 Message Date
Milka Kuzminski
6cf496d104 notifications: skip double rendering just to generate email title/desc 2020-11-11 22:44:38 +01:00
Marcin Kuzminski
dd344bb96b users: autocomplete now sorts by matched username to show best matches first. 2020-10-09 09:39:50 +02:00
Marcin Kuzminski
50d91914f5 emails: set References header for threading in mail user agents even with different subjects
- drop template headers() function as it wasn't used, and actually had bad implementation
2020-07-15 21:37:03 +02:00
Marcin Kuzminski
aae4c3e227 comments: added rcextensions hoooks for comment editing, and renamed methods to remove odd log_ prefix which
isn't exactly what those functions were actually doing.
2020-07-14 11:24:40 +02:00
Daniel Dourvaris
03f066ce9a users: added option to detach pull requests for users which we delete.
- as bonus added ability to specify new owner via ?detach_user_id=NUM GET param.
2020-05-20 12:33:43 +02:00
Marcin Kuzminski
fe96e16646 code: update copyrights to 2020 2020-04-16 00:34:52 +02:00
Marcin Kuzminski
b3c6e232b9 registration: properly expose first_name/last_name into email fake object. 2019-11-12 15:11:35 +01:00
Daniel Dourvaris
453a6ee9a2 emails: updated emails design and data structure they provide.
- more consistent UI for emails
- nicer formatting, plaintext emails
- major cleanup and fixes lots of incosistencies
- additionally debug-style now allows to test emails in browser for faster development
2019-11-05 19:07:09 +01:00
Marcin Kuzminski
9b9e7d2a5a users: description edit fixes
- tests
- added metatags info
2019-10-31 11:22:32 +01:00
Marcin Kuzminski
cd0bf47064 users: add edition of description in admin view for users 2019-10-31 10:28:13 +01:00
Marcin Kuzminski
e350c718ba user: speed up data propagatation for auth users by pre-filling only selected variables
skipping some not-required and using faster update method (not setattr())
2019-10-30 14:49:42 +01:00
Marcin Kuzminski
8b8d8ab401 artifacts: handle detach/delete of artifacts for users who own them and are to be deleted.
- added relationships that cleanup properly
- cleanup code for detach/delete on users
2019-10-24 17:05:07 +02:00
Marcin Kuzminski
3876870e28 tests: stabilize tests for mysql/postgres. 2019-10-08 17:06:35 +02:00
Marcin Kuzminski
522f374fae users: fetch user data for user removal hook, *before* actually marking object for deletion. 2019-10-08 14:04:53 +02:00
Daniel Dourvaris
32f6c7aa28 logging: small updates for logging. 2019-09-27 12:36:12 +02:00
Marcin Kuzminski
bd1a9c8201 docs: updated copyrights to 2019 2019-01-02 18:13:27 +01:00
Marcin Kuzminski
64c5591c2e authentication: allow setting extern type with registration.
- This will allow external identity plugins to define proper externs instead of always
  using "rhodecode" one
2018-11-29 18:13:31 +01:00
Marcin Kuzminski
e9cb071b85 users: when deleting users ensure we also clear personal flag so we don't have multiple personal groups
for super-admin who inherits the detached objects.
2018-09-24 19:02:21 +02:00
Marcin Kuzminski
9033601562 logging: use lazy parameter evaluation in log calls. 2018-09-13 17:41:35 +02:00
Marcin Kuzminski
8510d1ece8 models: fixed spelling. 2018-08-19 11:00:02 +02:00
Marcin Kuzminski
b9af4aab18 auth-tokens: abstracted adding token for users into UserModel method for easier usage in scripts, and in future in API. 2018-08-10 15:20:29 +02:00
Marcin Kuzminski
04ad3b47be logs: fix leaking of tokens to logging. Fixes #5452 2018-03-22 17:51:42 +01:00
Marcin Kuzminski
00b45c1fa7 release: update copyright year to 2018 2018-01-19 17:13:16 +01:00
Marcin Kuzminski
6f2703e4af default-reviewers: introduce new voting rule logic that allows
defining vote rules for user groups assigned to the default reviewers.

- allows to set per number votes on user groups
- group reviewers by groups
- store the rules and show them in the UI
- fixes #5409
2018-01-19 12:38:25 +01:00
Marcin Kuzminski
52d5654850 users: allow caching of active users count. 2017-12-04 13:16:50 +01:00
Marcin Kuzminski
f9f80e3ff9 feed-token, user, performance: lazy load the feed_token. We only need it for
scope of web requests. For vcs operations, we don't need it.

- 20ms to load this can save up much time for SVN requests.
2017-12-04 12:14:01 +01:00
Marcin Kuzminski
1d332c03ad pylons: fixed code and test suite after removal of pylons. 2017-11-16 18:27:09 +01:00
Marcin Kuzminski
5f9ae2ae11 pylons: remove pylons as dependency
- dependencies: bumped:
 -setuptools-scm==1.15.6
 -celery==4.1.0
 -kombu==4.1.0
 -pytz==2017.3
 -Routes==2.4.1

Removed all pylons components. Refactored the code to use only pyramid
parts
2017-11-15 13:42:54 +01:00
Marcin Kuzminski
34175fd787 auth-rhodecode: don't fail on bcrypt if user password is set to None.
Default to emptry string to not cause an exception.
2017-10-07 10:02:57 +02:00
Marcin Kuzminski
708f22ac87 db: use unicode for some of the defaults to reduce sqlalchemy warnings. 2017-07-26 12:14:56 +02:00
Marcin Kuzminski
0c1f7e3306 auth: improve logging 2017-07-25 15:07:43 +02:00
Marcin Kuzminski
3f26df9f37 user: deprecated usage of api_keys.
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
2017-07-25 16:27:08 +02:00
Marcin Kuzminski
72eb573560 users: made the function for account deactivation easier to use inside ishell. 2017-07-24 11:51:07 +02:00
Marcin Kuzminski
4a9be66cd1 dependencies: bumped pyramid-debugtoolbar to 4.3.1 2017-07-12 22:55:39 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application.
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Kuzminski
4bd5c08e87 audit-logs: added audit-logs on user actions.
- adding/deleting ips
- adding/deleting emails
- edit/create
2017-06-14 14:38:59 +02:00
Marcin Kuzminski
9757a7c0c3 security: escape always the provided user data like firstname/lastname. 2017-06-06 11:59:46 +02:00
Marcin Kuzminski
1f812d6a5e caches: ensure we don't use non-ascii characters in cache keys.
- this could before lead to problems in beaker cache implementation.
2017-05-15 22:10:36 +02:00
Marcin Kuzminski
335ffaa6fd users: personal repo-group shouldn't be available for default user. 2017-04-25 08:38:38 +02:00
Marcin Kuzminski
0b80fe66c9 pull-request-reviewers: added option to add reviewers by picking an user group for pull requests.
- fixes #5228
2017-04-19 17:30:07 +02:00
Marcin Kuzminski
a3ed262ffd users: moved get_users from RepoModel to UserModel. 2017-04-19 16:58:38 +02:00
Marcin Kuzminski
a5b6055c00 admin-users: add audit page to allow showing user actions in RhodeCode.
- this is a helper filter that allows to filter out admin journal for particular user.
- refs #5256
2017-03-23 13:50:55 +01:00
Marcin Kuzminski
bcd1b3ff15 auth-tokens: don't generate builtin token for new users.
- also don't change them when password reset is made.
2017-02-27 11:59:13 +01:00
Marcin Kuzminski
0ca4b7cbfc password-reset: strengthten security on password reset logic.
- generate token that has special password reset role
- set 10 minut expiration on the token
- add some sleep to prevent bruteforcing attacks
- use implicit messages to prevent user email discovery attacks
2017-02-26 21:28:09 +01:00
Marcin Kuzminski
2b30c7c2b7 logging: improve slightly password reset logs. 2017-01-11 19:55:56 +01:00
Marcin Kuzminski
fcc027c282 license: updated copyright year to 2017 2017-01-02 09:30:39 +01:00
Marcin Kuzminski
9e6713219c repo-groups: implemented default personal repo groups logic.
- fixes #4003
- adds new settings to automatically create personal repo groups for users on API cal, add user form, registration
- it's possible to create a pattern based repo group for example /u/{username}
2016-11-07 15:27:36 +01:00
Marcin Lulek
2ab245bc4b notifications: store notification status in channelstream 2016-09-01 12:03:44 +02:00
Daniel Dourvaris
b51406ec1d account: convert change password form to colander schema and fix bug
where user could use same password as before when changing
password, fixes #2264
2016-08-05 06:55:35 +03:00
Marcin Kuzminski
9d875ad256 emails: fixed password reset confirmation that was broken because of undefied variable. 2016-08-01 23:11:16 +02:00