engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2251 commits 1 branch 0 tags 110 MiB
Commit graph

507 commits

Author SHA1 Message Date
Marcin Kuzminski
03068b3426 core: added support for golang go import functionality 2017-10-29 10:14:24 +01:00
Marcin Kuzminski
10cad89493 auth: don't break hashing in case of user with empty password. 
In some cases such as LDAP user created via external scripts users might
set the passwords to empty. The hashing uses the md5(password_hash) to
store reference to detect password changes and forbid using the same password.

In case of pure LDAP users this is not valid, and we shouldn't raise Errors in such
case. This change makes it work for empty passwords now.
 2017-10-27 16:29:46 +02:00
Marcin Kuzminski
9262805438 core: use common bootstrap for pyramid app 2017-10-25 11:58:54 +02:00
Marcin Kuzminski
38c78cd493 ssh: allow customizing the base_url for running application. 
Allows proper URLs inside events when executing on SSH calls.
 2017-10-25 11:48:03 +02:00
Marcin Kuzminski
d394c2653a ssh-support: enabled full handling of all backends via SSH. 
- run callback deamons
- run proper authentication checks
- add relative loging.
- fixes #5312
 2017-10-24 23:48:14 +02:00
Marcin Kuzminski
3135dd089e audit-logger: use raw JSON with empty data to control unicode decode warnings. 
Passing in empty dict triggers warnings on sqlalchemy level that we're trying to pass in NON unicode into Unicode column.
 2017-10-24 10:50:57 +02:00
Marcin Kuzminski
7e65f0e21d exceptions: improve handling of exception that are unhandled. 
- inject traceback information into unhandled exceptions.
 2017-10-23 20:43:19 +02:00
Marcin Kuzminski
27aff1de7a pull-requests: trigger merge simulation during PR creation. Fixes #5396 2017-10-12 20:57:02 +02:00
Marcin Kuzminski
0baf293f82 files: remove rigth-to-left override character for display in files. 
This allows faking the name a bit, we in this particular place want to
skip the override for enhanced security.
 2017-10-10 10:46:54 +02:00
Marcin Lulek
df9121dcf1 auth: don't expose full set of permissions into channelstream payload. 
This leads to resource discovery security vulnerability
 2017-10-08 23:31:45 +02:00
Marcin Kuzminski
7781eabe94 auth: use cache_ttl from a plugin to also cache permissions. 
- this gives a 30% speed increase in operations like svn commit
- generally uses the same mechanismy like auth cache to cache permissions for faster
access to vcs commands
 2017-10-07 10:02:39 +02:00
Marcin Kuzminski
862e0c122b commits: hide evolve commits. Fixes #5392 2017-10-03 16:37:39 +02:00
Marcin Kuzminski
cf61eeac12 user sessions: get ability to count memcached sessions 2017-09-29 12:59:44 +02:00
Marcin Kuzminski
f445addfdd vcs: reduce sql queries used during pull/push operations. 2017-09-28 21:45:19 +02:00
Marcin Kuzminski
5fc9f7567b hooks: added debug logs. 2017-09-28 22:14:43 +02:00
Marcin Kuzminski
3718a47d3f changelog: fix and optimize loading of chunks for file history. 
- load-next/prev wasn't working
- make sure pagination works as expected
- speed up certain actions by pre-loading more attributes
 2017-09-27 13:21:57 +02:00
Marcin Kuzminski
e6fffe4b97 binaries: cleanup new upcomming rc-* commands that will replace paster * commands from pylons 2017-09-21 21:45:01 +02:00
Marcin Kuzminski
b505377197 users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
Marcin Kuzminski
37ef509c3f tests: fixed some more test issues during stress tests runs. 2017-09-21 11:52:32 +02:00
Marcin Kuzminski
b95e835ebb audit-logs: allow showing individual entries for audit log. 2017-09-21 16:47:10 +02:00
Marcin Kuzminski
13e4927d13 logging: use logger_generic in all suitable places, and fix get_current_rhodecode_user() 
function to use the new mechanics from pyramid. Fixes #5390
 2017-09-20 17:39:46 +02:00
Marcin Kuzminski
26635ebc3e routing: remove usage of url.current from pylons. 2017-09-20 15:44:49 +02:00
Marcin Kuzminski
b8a108e1d4 sessions: don't use pylons sessions for csrf tokens 2017-09-19 23:29:03 +02:00
Marcin Kuzminski
a3a6e8ca3f migration: remove usage of pylons inside migration schemas and code. 2017-09-19 12:27:45 +02:00
Marcin Kuzminski
cfe326566d helpers: remove usage of pylons session. 2017-09-19 17:11:48 +02:00
Marcin Kuzminski
f59da891ad metatags: improve display syntax and add deprecated tag. 2017-09-14 20:14:11 +02:00
Marcin Kuzminski
6dada9f346 meta-tags: cleanup support for metatags. 
- fixes problem of html-escape + supported link
- no longer extract url from description, you have to use new url => tag
- tags are extracted to the beginning of the description during rendering
- show helpers in proper places in groups/repos/forks
 2017-09-14 17:31:52 +02:00
Marcin Kuzminski
77ccbcae5e markup: use cached version of http pattern for urlify_text. This 
increases performance because we don't have to compile the pattern each time
we execute this commonly used function.
 2017-09-14 11:26:46 +02:00
Marcin Kuzminski
fa3a86bbcb helpers: make sure request parameter is not rendered inside secure form. 2017-09-12 22:49:26 +02:00
Marcin Lulek
f42a5ca66b db: use LONGTEXT for mysql in user_logs. Fixes #5385, problem with mysql rejecting 
insert because of too long json data.

- simple case of lots of users in user group can cause mysql to fail on insert
 2017-09-12 13:35:35 +02:00
Marcin Kuzminski
a58bd2a9a6 pep8: cleanup code of lru_debug 2017-09-08 12:40:29 +02:00
Marcin Kuzminski
4e50794cfb auth: use consistent way of extracting came_from, and also sanitise it to remove 
auth_token. This prevents a loop of redirection in case we get redirected to login
with this parameter.
 2017-09-06 23:39:45 +02:00
Daniel Dourvaris
8f02ca668c diffs: use whole chunk diff to calculate if it's oversized or not. 
- This fixes an issue if a file is added that has very large number of small lines.
In this case the time to detect if the diff should be limited was very very long and CPU intensive.
 2017-09-01 15:56:50 +02:00
Marcin Kuzminski
3f0ff6b65b vcs: report 404 for shadow repos that are not existing anymore. Before we got 500 exception in this case. 2017-09-01 13:10:52 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
48959fcd73 auth: don't double register the permission in case no inheritance is turned on 2017-08-28 12:56:04 +02:00
Marcin Kuzminski
c0899ff09d auth: expose a option to calculate how we end up having super-admin permission. 
This is now used only for visual display. The old way is still faster for permissions
calculation.

- the extended way will be used in permission summary showing a much more detailed
permission summary for super-admins.
 2017-08-27 19:30:42 +02:00
Marcin Kuzminski
54ad0eaea2 auth: use pesistent naming of keys in auth. Refactoring only. 2017-08-27 19:29:10 +02:00
Marcin Kuzminski
868ab0ed73 permissions: explicitly register all permissions set for user. Fixes #4217 
- in order to get a proper inheritance chain of permissions we'll register each step.
This allows to get full inheritance chain. Final permissions will be the same becuase
the only thing we change is we register each step before permissions final value.
- Also display the permissions summary in a nicer way more explicitly stating what
permissions overwrites which.
 2017-08-25 17:43:28 +02:00
Daniel Dourvaris
83e3196e55 initial-gravatars: fix case of dot beeing present before @domain. 2017-08-25 10:27:00 +02:00
Marcin Kuzminski
198094e646 mercurial: updated logging and function calls. 2017-08-24 18:49:20 +02:00
Marcin Kuzminski
bffc3ecda9 git: added identify command for checking the current checkout commit 2017-08-24 18:44:31 +02:00
Marcin Kuzminski
990994942d pull-requests: use close action with proper --close-commit solution. 
- Mercurial settings are no long as LABS
- Unified some code between GIT and HG on rebase/close/delete feature branches
 2017-08-24 22:36:34 +02:00
Mathieu Cantin
761e973359 mercurial: Add option to close a branch before merging 2017-08-08 13:46:42 -04:00
Marcin Kuzminski
dcedd44327 auth: added additional name filters to the acl helpers. 
- helps narrowing the results based on if we use a search param or not.
 2017-08-16 21:51:10 +02:00
Marcin Kuzminski
f539d88365 auth: added helpers to fetch IDs of repos/repo groups/user groups that 
user have access to.

- this can be used to do filtering by IDs and do SQL based ACLs
 2017-08-16 14:05:36 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid. 
- fixed few small found problems
- code cleanups
 2017-08-11 13:00:47 +02:00
Marcin Kuzminski
5286b2484f core: added two new commands rcsetup-app and rcupgrade-db that will 
replace pserve equivalents.

- pserver uses some internals from pylons, and we want to remove this.
 2017-08-04 15:42:14 +02:00
Marcin Kuzminski
c18fe82344 core: expose pshell as ipython with RhodeCode imports. 
- will replace soon paster ishell
 2017-08-04 15:15:43 +02:00
Marcin Kuzminski
68e8c23896 markup: make relative links pint to raw files for images and to standard files as links. 
- allows building relative MD/RST links that go to rendered content
- still allows to embed images/video with relative paths
 2017-08-04 10:54:33 +02:00