Milka Kuzminski
6cf496d104
notifications: skip double rendering just to generate email title/desc
2020-11-11 22:44:38 +01:00
Marcin Kuzminski
dd344bb96b
users: autocomplete now sorts by matched username to show best matches first.
2020-10-09 09:39:50 +02:00
Marcin Kuzminski
50d91914f5
emails: set References header for threading in mail user agents even with different subjects
...
- drop template headers() function as it wasn't used, and actually had bad implementation
2020-07-15 21:37:03 +02:00
Marcin Kuzminski
aae4c3e227
comments: added rcextensions hoooks for comment editing, and renamed methods to remove odd log_ prefix which
...
isn't exactly what those functions were actually doing.
2020-07-14 11:24:40 +02:00
Daniel Dourvaris
03f066ce9a
users: added option to detach pull requests for users which we delete.
...
- as bonus added ability to specify new owner via ?detach_user_id=NUM GET param.
2020-05-20 12:33:43 +02:00
Marcin Kuzminski
fe96e16646
code: update copyrights to 2020
2020-04-16 00:34:52 +02:00
Marcin Kuzminski
b3c6e232b9
registration: properly expose first_name/last_name into email fake object.
2019-11-12 15:11:35 +01:00
Daniel Dourvaris
453a6ee9a2
emails: updated emails design and data structure they provide.
...
- more consistent UI for emails
- nicer formatting, plaintext emails
- major cleanup and fixes lots of incosistencies
- additionally debug-style now allows to test emails in browser for faster development
2019-11-05 19:07:09 +01:00
Marcin Kuzminski
9b9e7d2a5a
users: description edit fixes
...
- tests
- added metatags info
2019-10-31 11:22:32 +01:00
Marcin Kuzminski
cd0bf47064
users: add edition of description in admin view for users
2019-10-31 10:28:13 +01:00
Marcin Kuzminski
e350c718ba
user: speed up data propagatation for auth users by pre-filling only selected variables
...
skipping some not-required and using faster update method (not setattr())
2019-10-30 14:49:42 +01:00
Marcin Kuzminski
8b8d8ab401
artifacts: handle detach/delete of artifacts for users who own them and are to be deleted.
...
- added relationships that cleanup properly
- cleanup code for detach/delete on users
2019-10-24 17:05:07 +02:00
Marcin Kuzminski
3876870e28
tests: stabilize tests for mysql/postgres.
2019-10-08 17:06:35 +02:00
Marcin Kuzminski
522f374fae
users: fetch user data for user removal hook, *before* actually marking object for deletion.
2019-10-08 14:04:53 +02:00
Daniel Dourvaris
32f6c7aa28
logging: small updates for logging.
2019-09-27 12:36:12 +02:00
Marcin Kuzminski
bd1a9c8201
docs: updated copyrights to 2019
2019-01-02 18:13:27 +01:00
Marcin Kuzminski
64c5591c2e
authentication: allow setting extern type with registration.
...
- This will allow external identity plugins to define proper externs instead of always
using "rhodecode" one
2018-11-29 18:13:31 +01:00
Marcin Kuzminski
e9cb071b85
users: when deleting users ensure we also clear personal flag so we don't have multiple personal groups
...
for super-admin who inherits the detached objects.
2018-09-24 19:02:21 +02:00
Marcin Kuzminski
9033601562
logging: use lazy parameter evaluation in log calls.
2018-09-13 17:41:35 +02:00
Marcin Kuzminski
8510d1ece8
models: fixed spelling.
2018-08-19 11:00:02 +02:00
Marcin Kuzminski
b9af4aab18
auth-tokens: abstracted adding token for users into UserModel method for easier usage in scripts, and in future in API.
2018-08-10 15:20:29 +02:00
Marcin Kuzminski
04ad3b47be
logs: fix leaking of tokens to logging. Fixes #5452
2018-03-22 17:51:42 +01:00
Marcin Kuzminski
00b45c1fa7
release: update copyright year to 2018
2018-01-19 17:13:16 +01:00
Marcin Kuzminski
6f2703e4af
default-reviewers: introduce new voting rule logic that allows
...
defining vote rules for user groups assigned to the default reviewers.
- allows to set per number votes on user groups
- group reviewers by groups
- store the rules and show them in the UI
- fixes #5409
2018-01-19 12:38:25 +01:00
Marcin Kuzminski
52d5654850
users: allow caching of active users count.
2017-12-04 13:16:50 +01:00
Marcin Kuzminski
f9f80e3ff9
feed-token, user, performance: lazy load the feed_token. We only need it for
...
scope of web requests. For vcs operations, we don't need it.
- 20ms to load this can save up much time for SVN requests.
2017-12-04 12:14:01 +01:00
Marcin Kuzminski
1d332c03ad
pylons: fixed code and test suite after removal of pylons.
2017-11-16 18:27:09 +01:00
Marcin Kuzminski
5f9ae2ae11
pylons: remove pylons as dependency
...
- dependencies: bumped:
-setuptools-scm==1.15.6
-celery==4.1.0
-kombu==4.1.0
-pytz==2017.3
-Routes==2.4.1
Removed all pylons components. Refactored the code to use only pyramid
parts
2017-11-15 13:42:54 +01:00
Marcin Kuzminski
34175fd787
auth-rhodecode: don't fail on bcrypt if user password is set to None.
...
Default to emptry string to not cause an exception.
2017-10-07 10:02:57 +02:00
Marcin Kuzminski
708f22ac87
db: use unicode for some of the defaults to reduce sqlalchemy warnings.
2017-07-26 12:14:56 +02:00
Marcin Kuzminski
0c1f7e3306
auth: improve logging
2017-07-25 15:07:43 +02:00
Marcin Kuzminski
3f26df9f37
user: deprecated usage of api_keys.
...
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
2017-07-25 16:27:08 +02:00
Marcin Kuzminski
72eb573560
users: made the function for account deactivation easier to use inside ishell.
2017-07-24 11:51:07 +02:00
Marcin Kuzminski
4a9be66cd1
dependencies: bumped pyramid-debugtoolbar to 4.3.1
2017-07-12 22:55:39 +02:00
Marcin Lulek
ad54b9a57d
security: use new safe escaped user attributes across the application.
...
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Kuzminski
4bd5c08e87
audit-logs: added audit-logs on user actions.
...
- adding/deleting ips
- adding/deleting emails
- edit/create
2017-06-14 14:38:59 +02:00
Marcin Kuzminski
9757a7c0c3
security: escape always the provided user data like firstname/lastname.
2017-06-06 11:59:46 +02:00
Marcin Kuzminski
1f812d6a5e
caches: ensure we don't use non-ascii characters in cache keys.
...
- this could before lead to problems in beaker cache implementation.
2017-05-15 22:10:36 +02:00
Marcin Kuzminski
335ffaa6fd
users: personal repo-group shouldn't be available for default user.
2017-04-25 08:38:38 +02:00
Marcin Kuzminski
0b80fe66c9
pull-request-reviewers: added option to add reviewers by picking an user group for pull requests.
...
- fixes #5228
2017-04-19 17:30:07 +02:00
Marcin Kuzminski
a3ed262ffd
users: moved get_users from RepoModel to UserModel.
2017-04-19 16:58:38 +02:00
Marcin Kuzminski
a5b6055c00
admin-users: add audit page to allow showing user actions in RhodeCode.
...
- this is a helper filter that allows to filter out admin journal for particular user.
- refs #5256
2017-03-23 13:50:55 +01:00
Marcin Kuzminski
bcd1b3ff15
auth-tokens: don't generate builtin token for new users.
...
- also don't change them when password reset is made.
2017-02-27 11:59:13 +01:00
Marcin Kuzminski
0ca4b7cbfc
password-reset: strengthten security on password reset logic.
...
- generate token that has special password reset role
- set 10 minut expiration on the token
- add some sleep to prevent bruteforcing attacks
- use implicit messages to prevent user email discovery attacks
2017-02-26 21:28:09 +01:00
Marcin Kuzminski
2b30c7c2b7
logging: improve slightly password reset logs.
2017-01-11 19:55:56 +01:00
Marcin Kuzminski
fcc027c282
license: updated copyright year to 2017
2017-01-02 09:30:39 +01:00
Marcin Kuzminski
9e6713219c
repo-groups: implemented default personal repo groups logic.
...
- fixes #4003
- adds new settings to automatically create personal repo groups for users on API cal, add user form, registration
- it's possible to create a pattern based repo group for example /u/{username}
2016-11-07 15:27:36 +01:00
Marcin Lulek
2ab245bc4b
notifications: store notification status in channelstream
2016-09-01 12:03:44 +02:00
Daniel Dourvaris
b51406ec1d
account: convert change password form to colander schema and fix bug
...
where user could use same password as before when changing
password, fixes #2264
2016-08-05 06:55:35 +03:00
Marcin Kuzminski
9d875ad256
emails: fixed password reset confirmation that was broken because of undefied variable.
2016-08-01 23:11:16 +02:00