Commit graph

139 commits

Author SHA1 Message Date
Marcin Kuzminski
69a865a7a3 repo-groups: moved to pyramid 2017-10-17 14:06:51 +02:00
Marcin Kuzminski
b505377197 users: ported controllers from pylons into pyramid views. 2017-09-20 22:29:34 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid
- added new event data with added/removed/changed permissions
- cleanup code and spelling
2017-08-31 12:47:19 +02:00
Marcin Kuzminski
990994942d pull-requests: use close action with proper --close-commit solution.
- Mercurial settings are no long as LABS
- Unified some code between GIT and HG on rebase/close/delete feature branches
2017-08-24 22:36:34 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid.
- fixed few small found problems
- code cleanups
2017-08-11 13:00:47 +02:00
Marcin Kuzminski
17359c262c integrations: rewrote usage of pylons components inside integrations.
- added better auth decorators as used in other parts of the app
- fixed tests
- refactored the code to match other parts better (repo_route/repo_group_route)
2017-08-01 23:11:49 +02:00
Marcin Kuzminski
05386904e7 forks: moved pylons code into pyramid. 2017-08-01 11:48:16 +02:00
Marcin Kuzminski
3430eb74e5 repositories: ported repo_creating checks to pyramid.
- fixed security issues with resource discovery.
- ported repository creating check into base view for repos.
2017-07-28 15:56:06 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00
Marcin Kuzminski
eccdae6f25 tests: disable one test that fails because it was written in a wrong way.
- we'll re-enable it after migrating user groups to pyramid.
2017-07-27 11:39:56 +02:00
Marcin Kuzminski
b203d5f208 pull-requests: migrated code from pylons to pyramid 2017-07-27 11:30:55 +02:00
Marcin Kuzminski
93c5a7f9c5 compare: migrated code from pylons to pyramid views. 2017-07-26 13:28:45 +02:00
Marcin Kuzminski
8efc4d92c5 repo-commits: ported changeset code into pyramid views.
- refactored part of naming to use commit_id instead of revision
- renamed some parts to repo_commits instead of changeset without breaking backward compat
- small improvements and fixes for tests
2017-07-24 17:04:14 +02:00
Marcin Kuzminski
ff79205313 global-permissions: ported controller to pyramid view.
- fixed some other tests cases to rely on test routing
2017-07-20 15:04:36 +02:00
Marcin Kuzminski
c276174e89 journal: ported controller to pyramid code 2017-07-18 23:38:15 +02:00
Marcin Kuzminski
b2714a3c1d changelog: ported to pyramid views. 2017-07-18 00:07:43 +02:00
Marcin Kuzminski
53611d6f94 files: ported repository files controllers to pyramid views. 2017-07-17 14:20:22 +02:00
Marcin Kuzminski
580a0d0ea5 notifications: ported views to pyramid 2017-07-13 18:28:31 +02:00
Marcin Kuzminski
71071c0b26 dependencies: bumped pyramid to 1.9 webob to 1.7.3 and webtest to 2.0.27
- fixed some core tests for new webob/webtest
- changed core methods to make them more pyramid compat.
2017-07-12 22:54:14 +02:00
Marcin Kuzminski
93de470b3f tests: fixed few possible cases of detached instance errors. 2017-07-12 16:32:06 +02:00
Daniel Dourvaris
81fa857318 repo-feed: moved from pylons controller to pyramid views. 2017-07-09 10:25:14 +02:00
Daniel Dourvaris
f0ff4c5ce2 my-account: migrated left over controller functions into pyramid views.
- pull requests are now lazy loaded via dataGrid
2017-07-07 23:22:59 +02:00
Daniel Dourvaris
93b6dfba9a gists: migrated gists controller to pyramid view. 2017-07-07 12:05:30 +02:00
Marcin Lulek
cb6d81f435 security: escape flash messaged VCS errors to prevent XSS atacks. 2017-06-26 14:48:15 +02:00
Marcin Kuzminski
effa0f53ce users-admin: moved views into pyramid for editing emails and ips.
- added audit-logging
- added few additional tests
2017-06-20 13:53:44 +02:00
Marcin Kuzminski
214e9059ec my-account: moved few my account views into pyramid. 2017-06-20 00:11:36 +02:00
Marcin Lulek
e919908333 security: make sure the admin of repo can only delete comments which are from the same repo.
- fixes IDOR issue
- protects against other people comment deletion by repo admins.
2017-06-19 21:15:37 +02:00
Marcin Lulek
cc53162981 security: use 404 instead of 403 code on permission decorator to prevent resource discovery attacks. 2017-06-19 18:15:57 +02:00
Marcin Kuzminski
f442430df8 my-account: moved emails config into pyramid views. 2017-06-19 15:30:09 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application.
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Lulek
779587086e security: fixed self-xss inside file views. 2017-06-17 17:06:57 +02:00
Marcin Kuzminski
926a79e98e audit-logs: implemented pull request and comment events. 2017-06-17 15:22:50 +02:00
Marcin Kuzminski
5915f38fcf pull-request-api: updated logic of closing a PR via API call.
- consistent logic via web and API
- updated events
- updated proper close checks.
2017-06-13 00:14:21 +02:00
Marcin Kuzminski
47f9f32ad9 events: expose permalink urls for different set of object.
- permalink url should provide a non-changeable url that can be used in
external sources with guarantee of beeing always valid.
2017-06-08 16:11:33 +02:00
Marcin Kuzminski
53b4ac98f8 repo-summary: re-implemented summary view as pyramid.
- changed exception handler, to now work in pure pyramid mode
- changed missing requirements logic on repo based views that require vcs-connection
2017-06-07 13:23:21 +02:00
Marcin Kuzminski
71fee00277 home: moved home and repo group views into pyramid.
- fixed lots of tests related to those changes
- now main and subrepo group views are handled by pyramid.
2017-06-05 15:16:04 +02:00
Marcin Kuzminski
bd1e865c9c pull-request: extended default reviewers functionality.
- added mandatory reviewers JS logic Fixes: #4219
- added option to forbid author to be a reviewer via JS/Frontend checks. Fixes #5190
- added option to forbid adding new reviewers except those defined. Fixes #5208
2017-05-29 20:10:17 +02:00
Marcin Kuzminski
7216dd64ff audit-logs: introduced new view to replace admin journal.
- audit logs will represent the all important actions made inside the system
- raw view visible for super-admins
2017-05-19 10:33:10 +02:00
Marcin Kuzminski
726bc5aba8 hooks: deprecate old action_logger 2017-05-17 16:42:00 +02:00
Marcin Kuzminski
208136ab4d repo-settings: moved advanced setion into pyramid views.
- improved delete method, and actions.
2017-05-16 12:43:58 +02:00
Marcin Kuzminski
ca6ba228c3 tags/branches/bookmarks: moved views into pyramid. 2017-05-12 16:23:26 +02:00
Marcin Kuzminski
4801f5f8ca mercurial-evolve: enable evolve setting on repositories. 2017-05-10 18:33:59 +02:00
Marcin Kuzminski
664cbc6f52 audit-logs: add push/pull actions to audit logs. 2017-05-09 15:19:04 +02:00
Marcin Kuzminski
3680a0f227 tests: fixed tests for new repo settings
- added settings update missing tests
- fixed id generation to some tests for better display
2017-04-28 12:36:37 +02:00
Marcin Kuzminski
546bc59682 tests: fixed some tests after new audit-logger 2017-04-27 10:36:32 +02:00
Marcin Kuzminski
e5360e80e4 pull-reqests: workflow, change who can close a PR, it's only super-admin
owner or person who can merge.

- before it was every reviewer can close. Which really doesn't make sense.
2017-04-24 10:25:16 +02:00
Marcin Kuzminski
47f72d2b19 search: moved search into pyramid views. 2017-04-21 17:10:26 +02:00
Marcin Kuzminski
e6137d85f4 core: moved goto_switcher views into pyramid. 2017-04-19 15:12:58 +02:00
Marcin Kuzminski
d3041b73d6 core: moved repo_list data to pyramid. 2017-04-19 14:40:29 +02:00