engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2089 commits 1 branch 0 tags 110 MiB
Commit graph

2089 commits

This branch
This branch
All branches
Author SHA1 Message Date
Marcin Kuzminski
fa3a86bbcb helpers: make sure request parameter is not rendered inside secure form. 2017-09-12 22:49:26 +02:00
Marcin Lulek
f42a5ca66b db: use LONGTEXT for mysql in user_logs. Fixes #5385, problem with mysql rejecting 
insert because of too long json data.

- simple case of lots of users in user group can cause mysql to fail on insert
 2017-09-12 13:35:35 +02:00
Marcin Kuzminski
d42acbacb7 integrations: webhook, allow to set a custom header. Fixes #5384 2017-09-12 00:44:23 +02:00
Marcin Kuzminski
c4c8aded5e routes: add parent_group in add repository link on repo groups. Was lost in pyramid migration. 2017-09-11 22:02:44 +02:00
Marcin Kuzminski
75dd12de58 auth-tokens: fix placeholder text 2017-09-08 23:02:27 +02:00
Marcin Kuzminski
0fd76867b6 auth-tokens: allow specifing custom expiration date manually. 
- fixes #5323
 2017-09-08 18:03:35 +02:00
Marcin Kuzminski
56bbe6261a pull-request-events: add audit data for pull_request.close action 2017-09-08 16:04:22 +02:00
Marcin Kuzminski
3821db3f37 apps: removed deprecated usage of c.repo_info 2017-09-08 13:33:17 +02:00
Marcin Kuzminski
87a5eb4bde apps: cleanup imports 2017-09-08 12:56:47 +02:00
Marcin Kuzminski
e8fe72ebfb admin: cleanup imports. 2017-09-08 12:49:41 +02:00
Marcin Kuzminski
2b8223498e pep8: cleanup code for permissions 2017-09-08 12:42:40 +02:00
Marcin Kuzminski
a58bd2a9a6 pep8: cleanup code of lru_debug 2017-09-08 12:40:29 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Kuzminski
fb91fac6f0 gunicorn: allow custom logger to set consistent formatting of requests for gunicorn with rhodecode logging. 2017-09-07 17:56:52 +02:00
Marcin Kuzminski
4e50794cfb auth: use consistent way of extracting came_from, and also sanitise it to remove 
auth_token. This prevents a loop of redirection in case we get redirected to login
with this parameter.
 2017-09-06 23:39:45 +02:00
Marcin Kuzminski
b2d0a83a08 routing: add convert license redirect route. 2017-09-06 22:32:43 +02:00
Marcin Lulek
bf1579532f repo-summary: don't push the url used for generation of summary preview. The url is 
internal for just changelog data. Fixes #5380.
 2017-09-06 19:15:48 +02:00
Marcin Lulek
a307f2677c feeds: generate entries with proper unique ids. 
- fixes #5379
 2017-09-01 16:05:06 +02:00
Daniel Dourvaris
8f02ca668c diffs: use whole chunk diff to calculate if it's oversized or not. 
- This fixes an issue if a file is added that has very large number of small lines.
In this case the time to detect if the diff should be limited was very very long and CPU intensive.
 2017-09-01 15:56:50 +02:00
Marcin Kuzminski
3f0ff6b65b vcs: report 404 for shadow repos that are not existing anymore. Before we got 500 exception in this case. 2017-09-01 13:10:52 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
ee20d401c8 users: changed spelling of users_groups to user_groups. Because English :] 2017-08-29 15:46:26 +02:00
Marcin Kuzminski
48959fcd73 auth: don't double register the permission in case no inheritance is turned on 2017-08-28 12:56:04 +02:00
Marcin Kuzminski
c0899ff09d auth: expose a option to calculate how we end up having super-admin permission. 
This is now used only for visual display. The old way is still faster for permissions
calculation.

- the extended way will be used in permission summary showing a much more detailed
permission summary for super-admins.
 2017-08-27 19:30:42 +02:00
Marcin Kuzminski
54ad0eaea2 auth: use pesistent naming of keys in auth. Refactoring only. 2017-08-27 19:29:10 +02:00
Marcin Kuzminski
868ab0ed73 permissions: explicitly register all permissions set for user. Fixes #4217 
- in order to get a proper inheritance chain of permissions we'll register each step.
This allows to get full inheritance chain. Final permissions will be the same becuase
the only thing we change is we register each step before permissions final value.
- Also display the permissions summary in a nicer way more explicitly stating what
permissions overwrites which.
 2017-08-25 17:43:28 +02:00
Daniel Dourvaris
83e3196e55 initial-gravatars: fix case of dot beeing present before @domain. 2017-08-25 10:27:00 +02:00
Marcin Kuzminski
ebbfb35adf user-group: perms summary, fix view name. 2017-08-25 10:11:32 +02:00
Marcin Kuzminski
395cf5ac23 permissions: use same way of sorting of user_group permissions like user ones. 
- makes the display of objects in permission summary nicer to look at
 2017-08-24 22:28:28 +02:00
Marcin Kuzminski
1b6730d3c3 perms: fixed html error in template 2017-08-24 22:15:08 +02:00
Marcin Kuzminski
198094e646 mercurial: updated logging and function calls. 2017-08-24 18:49:20 +02:00
Marcin Kuzminski
bffc3ecda9 git: added identify command for checking the current checkout commit 2017-08-24 18:44:31 +02:00
Marcin Kuzminski
990994942d pull-requests: use close action with proper --close-commit solution. 
- Mercurial settings are no long as LABS
- Unified some code between GIT and HG on rebase/close/delete feature branches
 2017-08-24 22:36:34 +02:00
Mathieu Cantin
761e973359 mercurial: Add option to close a branch before merging 2017-08-08 13:46:42 -04:00
Marcin Kuzminski
a9f61590e0 user/user-groups: show if users or user groups are a part of review rules. 
- cascade delete when deleting those so we still can remove the user or user group
- fixes #5377
 2017-08-24 21:01:22 +02:00
Marcin Kuzminski
57031945a3 pull-requests: use merge info to show how Pull requests will be merged. 
- rebase or merge commit is shown as merge strategy.
- close/delete branch are shown if that option is selected.
 2017-08-23 13:48:10 +02:00
Marcin Kuzminski
c7704859cf pull-requests: in case of an error redirect to the same url as source. 
- will keep the bookmark/branch info, and help re-select proper revisions.
 2017-08-23 12:31:38 +02:00
Marcin Kuzminski
5a490b42a4 pull-requests: redirect to repo PR after delete instead of my account. 2017-08-22 22:29:38 +02:00
Marcin Kuzminski
34a59d2066 compare: make sure to not do any redirects for XHR requests types. 
This can lead to page-in-page rendering when using ajax compare loading.
 2017-08-23 13:02:37 +02:00
Marcin Kuzminski
565bfee4c7 files: removed some left over debug. 2017-08-24 17:45:18 +02:00
Marcin Kuzminski
890cb7ef61 search: per-repo search shouldn't require admin permissions. Read is enought because we access the repo only 2017-08-21 19:30:27 +02:00
Marcin Kuzminski
7c571b29bc ssh: fixed tests for disabled ssh support 2017-08-20 20:48:10 +02:00
Marcin Kuzminski
77566e197e config: update .ini file examples 2017-08-20 12:28:05 +02:00
Marcin Kuzminski
ededb0c7ff SSH: disable visually support ssh keys if we have them disabled in the .ini 2017-08-20 12:23:47 +02:00
Marcin Kuzminski
b7c17b192d ssh: added ssh key management into my account. 2017-08-19 17:47:01 +02:00
Marcin Kuzminski
034abca8dc ssh: embedded ssh support 
- updated command generation and added debug flag
- updated .ini config to have ALL required components to run SSH commands
- rcssh-wrapper now is embedded and pinned into version of enterprise
- update ssh_support configration
- implements #5343
 2017-08-18 14:32:00 +02:00
Marcin Kuzminski
3ea8958a92 ssh-keys: added admin panel for managing globally all SSH Keys. 
- added also option to manually update the keyfile
- fetch and show all user keys for audit purpose
 2017-08-17 22:46:26 +02:00
Marcin Kuzminski
42f25bce8e docs: updated Apache documentation for serving static files 2017-08-18 14:29:52 +02:00
Marcin Kuzminski
429c3a56cb data-grid-app: added universal function for extracting ordering. 
- now supports format a.b
- supports passing a ref column e.g User.username, get's handy for joined querie
 2017-08-17 22:44:25 +02:00
Marcin Lulek
c681c84320 security: use no-referrer for outside link to stop leaking potential parameters such 
as auth token stored inside GET flags.

- based on hacker-one ticket
 2017-08-17 10:55:07 +02:00