engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2251 commits 1 branch 0 tags 110 MiB
Commit graph

222 commits

Author SHA1 Message Date
Marcin Kuzminski
69a865a7a3 repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
Marcin Kuzminski
b505377197 users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
Marcin Kuzminski
4679c5bfcb home: removed old pylons routes and convert them to pyramid ops app 2017-09-19 12:47:18 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
a9f61590e0 user/user-groups: show if users or user groups are a part of review rules. 
- cascade delete when deleting those so we still can remove the user or user group
- fixes #5377
 2017-08-24 21:01:22 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid. 
- fixed few small found problems
- code cleanups
 2017-08-11 13:00:47 +02:00
Marcin Kuzminski
905e6ea6e0 auth: XHRRequired decorator is no longer required. 
- was replaced by xhr=True view config of pyramid
 2017-08-03 21:39:48 +02:00
Marcin Kuzminski
2cc3df1920 users/user_groups: ported permission summary pages into pyramid. 
- added JSON views for extraction of parameters in parasable format.
 2017-08-03 20:18:49 +02:00
Marcin Kuzminski
05386904e7 forks: moved pylons code into pyramid. 2017-08-01 11:48:16 +02:00
Marcin Kuzminski
3430eb74e5 repositories: ported repo_creating checks to pyramid. 
- fixed security issues with resource discovery.
- ported repository creating check into base view for repos.
 2017-07-28 15:56:06 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00
Marcin Kuzminski
b203d5f208 pull-requests: migrated code from pylons to pyramid 2017-07-27 11:30:55 +02:00
Marcin Kuzminski
93c5a7f9c5 compare: migrated code from pylons to pyramid views. 2017-07-26 13:28:45 +02:00
Marcin Kuzminski
4de255d013 core: no longer rely on webob exception inside get_or_404 function. 
- relly on pyramid exc only
- helps reduce number of appenlight problems with 404 handling via webob
 2017-07-25 15:26:38 +02:00
Marcin Kuzminski
8efc4d92c5 repo-commits: ported changeset code into pyramid views. 
- refactored part of naming to use commit_id instead of revision
- renamed some parts to repo_commits instead of changeset without breaking backward compat
- small improvements and fixes for tests
 2017-07-24 17:04:14 +02:00
Marcin Kuzminski
ff79205313 global-permissions: ported controller to pyramid view. 
- fixed some other tests cases to rely on test routing
 2017-07-20 15:04:36 +02:00
Marcin Kuzminski
c276174e89 journal: ported controller to pyramid code 2017-07-18 23:38:15 +02:00
Marcin Kuzminski
b2714a3c1d changelog: ported to pyramid views. 2017-07-18 00:07:43 +02:00
Marcin Kuzminski
53611d6f94 files: ported repository files controllers to pyramid views. 2017-07-17 14:20:22 +02:00
Daniel Dourvaris
7add053ff8 users: add additional information why user with pending reviews shouldn't be deleted. 2017-07-13 22:40:12 +02:00
Marcin Kuzminski
580a0d0ea5 notifications: ported views to pyramid 2017-07-13 18:28:31 +02:00
Daniel Dourvaris
26099d657c debug-style: moved from pylons controller to pyramid view. 2017-07-09 11:09:18 +02:00
Daniel Dourvaris
81fa857318 repo-feed: moved from pylons controller to pyramid views. 2017-07-09 10:25:14 +02:00
Marcin Kuzminski
7178db58ba core: use new style pyramid partial renderer where possible. 2017-07-08 15:27:41 +02:00
Daniel Dourvaris
f0ff4c5ce2 my-account: migrated left over controller functions into pyramid views. 
- pull requests are now lazy loaded via dataGrid
 2017-07-07 23:22:59 +02:00
Daniel Dourvaris
93b6dfba9a gists: migrated gists controller to pyramid view. 2017-07-07 12:05:30 +02:00
Marcin Kuzminski
f53db19687 diffs: simplified the datastructure of fillediff. Hopefully this 
will allow better Garbage Collection.
 2017-06-28 14:03:57 +02:00
Marcin Lulek
cb6d81f435 security: escape flash messaged VCS errors to prevent XSS atacks. 2017-06-26 14:48:15 +02:00
Marcin Kuzminski
25436a7365 audit-logs: implemented full audit logs across application. 
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
 2017-06-21 12:03:14 +02:00
Marcin Lulek
ffb80aaa1a security: use 404 instead of 403 in case missing permissions for comment deletion. 
- prevents resource discovery
 2017-06-20 19:39:19 +02:00
Marcin Kuzminski
effa0f53ce users-admin: moved views into pyramid for editing emails and ips. 
- added audit-logging
- added few additional tests
 2017-06-20 13:53:44 +02:00
Marcin Kuzminski
214e9059ec my-account: moved few my account views into pyramid. 2017-06-20 00:11:36 +02:00
Marcin Lulek
e919908333 security: make sure the admin of repo can only delete comments which are from the same repo. 
- fixes IDOR issue
- protects against other people comment deletion by repo admins.
 2017-06-19 21:15:37 +02:00
Marcin Kuzminski
f442430df8 my-account: moved emails config into pyramid views. 2017-06-19 15:30:09 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application. 
- will fix all possible XSS attack vectors.
 2017-06-19 15:14:02 +02:00
Marcin Kuzminski
aa3bffd198 pull-requests: prepare the migration of pull request to pyramid. 
- this is half the code because of problems found during porting
- partially moved the urls, and flipped the logic into pyramid code
- needs more work in core for full switch.
 2017-06-19 13:25:15 +02:00
Marcin Kuzminski
dabc0de3df notifications: fixed problem with 500 errors on non-numeric 
notification id given.
 2017-06-19 10:10:19 +02:00
Marcin Lulek
779587086e security: fixed self-xss inside file views. 2017-06-17 17:06:57 +02:00
Marcin Kuzminski
926a79e98e audit-logs: implemented pull request and comment events. 2017-06-17 15:22:50 +02:00
Marcin Kuzminski
8a3441e96e audit-logs: use specific web/api calls. 
- also normalized action_data to specs.
 2017-06-14 16:33:23 +02:00
Marcin Kuzminski
8ae7a08fd3 audit-logs: added audit logs on user groups admin page. 2017-06-14 15:25:31 +02:00
Marcin Kuzminski
4bd5c08e87 audit-logs: added audit-logs on user actions. 
- adding/deleting ips
- adding/deleting emails
- edit/create
 2017-06-14 14:38:59 +02:00
Marcin Kuzminski
3e76f23368 audit-logs: added action logs for repository groups. 2017-06-14 12:39:51 +02:00
Marcin Kuzminski
10162bb050 cleanup: imports cleanup. 2017-06-14 11:23:27 +02:00
Daniel Dourvaris
2beb24a857 reviewers: added validation and default review rules via API calls. 
- update/create pull request now validate and update the default reviewer rules.
 2017-06-14 11:10:19 +02:00
Marcin Kuzminski
5915f38fcf pull-request-api: updated logic of closing a PR via API call. 
- consistent logic via web and API
- updated events
- updated proper close checks.
 2017-06-13 00:14:21 +02:00
Marcin Kuzminski
36f3dd22fb review-rules: extend code to support the forbid commit authors. 2017-06-08 13:39:54 +02:00
Marcin Kuzminski
53b4ac98f8 repo-summary: re-implemented summary view as pyramid. 
- changed exception handler, to now work in pure pyramid mode
- changed missing requirements logic on repo based views that require vcs-connection
 2017-06-07 13:23:21 +02:00
Marcin Kuzminski
71fee00277 home: moved home and repo group views into pyramid. 
- fixed lots of tests related to those changes
- now main and subrepo group views are handled by pyramid.
 2017-06-05 15:16:04 +02:00