Commit graph

23 commits

Author SHA1 Message Date
Marcin Kuzminski
686c51c8d7 quick-filter: make sure we always apply IN filter query. Otherwise we can
end up iwth empty query which disables the ACL filter.
2017-10-12 21:37:23 +02:00
Marcin Kuzminski
79c8fadc26 repo-data: fixed missing parameter we used to propagate JS with.
- was breaking the repo selectors
2017-09-21 19:46:27 +02:00
Marcin Kuzminski
87a5eb4bde apps: cleanup imports 2017-09-08 12:56:47 +02:00
Marcin Kuzminski
aca661a15e goto-switcher: optimized performance and query capabilities.
- Previous implementation had on significant bug. The use of LIMIT 20
was limiting results BEFORE auth checks. In case of large ammount of similarly
named repositories user didn't had access too, the result goto search was empty.

This was becuase first 20 items fetched didn't pass permission checks and final
auth list was empty.

To fix this we now use proper filtering for auth using SQL. It means we first check
user allowed repositories, and add this as a filter so end result from database is already
to only the accessible repositories.
2017-08-16 22:46:34 +02:00
Marcin Kuzminski
e8ec2b950f goto-switcher: use special commit: prefix to explicitly search for commits.
- previous solution could make the go-to swticher slow in case of huge search index
- mixing repository names and commit names could lead to bad UX when searching
- explicit case still allows this, but user is in the control how and what he wants to search
- fixes #5375
2017-08-15 21:33:01 +02:00
Marcin Kuzminski
c56bb0da4b core: removed usage of global pylons config in base lib. 2017-08-03 21:59:49 +02:00
Marcin Kuzminski
1c20025ca7 pyramid: use a faster scan method for faster app start. 2017-08-02 11:01:36 +02:00
Marcin Kuzminski
8efc4d92c5 repo-commits: ported changeset code into pyramid views.
- refactored part of naming to use commit_id instead of revision
- renamed some parts to repo_commits instead of changeset without breaking backward compat
- small improvements and fixes for tests
2017-07-24 17:04:14 +02:00
Marcin Kuzminski
ff28358243 tests: remove usage of pylons context var in home app test. 2017-07-08 00:03:39 +02:00
Daniel Dourvaris
f0ff4c5ce2 my-account: migrated left over controller functions into pyramid views.
- pull requests are now lazy loaded via dataGrid
2017-07-07 23:22:59 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application.
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Kuzminski
53b4ac98f8 repo-summary: re-implemented summary view as pyramid.
- changed exception handler, to now work in pure pyramid mode
- changed missing requirements logic on repo based views that require vcs-connection
2017-06-07 13:23:21 +02:00
Marcin Kuzminski
95eeb93a9a security: fixed tests. 2017-06-06 13:34:22 +02:00
Marcin Kuzminski
71fee00277 home: moved home and repo group views into pyramid.
- fixed lots of tests related to those changes
- now main and subrepo group views are handled by pyramid.
2017-06-05 15:16:04 +02:00
Marcin Kuzminski
83187d1dfc user-autocomplete: allow skipping default user. 2017-05-29 09:48:29 +02:00
Marcin Kuzminski
b2cfc90822 error-document: make sure the error document has registered helpers,
and uses only pyramid mechanics.

- in some edge cases the renderer_globals are not called and
we cannot rely on them
- this should be a purely pyramid view not relying on any of pylons
left overs.
2017-05-15 18:29:18 +02:00
Marcin Kuzminski
2d37a1e953 routing: switched static redirection links to pyramid.
- ref #4185
2017-04-20 01:00:09 +02:00
Marcin Kuzminski
0b80fe66c9 pull-request-reviewers: added option to add reviewers by picking an user group for pull requests.
- fixes #5228
2017-04-19 17:30:07 +02:00
Marcin Kuzminski
a3ed262ffd users: moved get_users from RepoModel to UserModel. 2017-04-19 16:58:38 +02:00
Marcin Kuzminski
b595153ea8 user-groups: moved get_user_groups from RepoModel to UserGroupModel. 2017-04-19 16:52:24 +02:00
Marcin Kuzminski
e6137d85f4 core: moved goto_switcher views into pyramid. 2017-04-19 15:12:58 +02:00
Marcin Kuzminski
d3041b73d6 core: moved repo_list data to pyramid. 2017-04-19 14:40:29 +02:00
Marcin Kuzminski
5627c638be core: moved users and user groups autocomplete into pyramid.
- added more tests
- added some logging
2017-04-19 14:34:57 +02:00