engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2089 commits 1 branch 0 tags 110 MiB
Commit graph

166 commits

Author SHA1 Message Date
Marcin Kuzminski
0fd76867b6 auth-tokens: allow specifing custom expiration date manually. 
- fixes #5323
 2017-09-08 18:03:35 +02:00
Marcin Kuzminski
3821db3f37 apps: removed deprecated usage of c.repo_info 2017-09-08 13:33:17 +02:00
Marcin Kuzminski
87a5eb4bde apps: cleanup imports 2017-09-08 12:56:47 +02:00
Marcin Kuzminski
e8fe72ebfb admin: cleanup imports. 2017-09-08 12:49:41 +02:00
Marcin Kuzminski
7a511201a1 admin-defaults: ported views to pyramid. 2017-09-08 11:48:48 +02:00
Marcin Lulek
a307f2677c feeds: generate entries with proper unique ids. 
- fixes #5379
 2017-09-01 16:05:06 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
ee20d401c8 users: changed spelling of users_groups to user_groups. Because English :] 2017-08-29 15:46:26 +02:00
Marcin Kuzminski
ebbfb35adf user-group: perms summary, fix view name. 2017-08-25 10:11:32 +02:00
Marcin Kuzminski
57031945a3 pull-requests: use merge info to show how Pull requests will be merged. 
- rebase or merge commit is shown as merge strategy.
- close/delete branch are shown if that option is selected.
 2017-08-23 13:48:10 +02:00
Marcin Kuzminski
c7704859cf pull-requests: in case of an error redirect to the same url as source. 
- will keep the bookmark/branch info, and help re-select proper revisions.
 2017-08-23 12:31:38 +02:00
Marcin Kuzminski
5a490b42a4 pull-requests: redirect to repo PR after delete instead of my account. 2017-08-22 22:29:38 +02:00
Marcin Kuzminski
34a59d2066 compare: make sure to not do any redirects for XHR requests types. 
This can lead to page-in-page rendering when using ajax compare loading.
 2017-08-23 13:02:37 +02:00
Marcin Kuzminski
890cb7ef61 search: per-repo search shouldn't require admin permissions. Read is enought because we access the repo only 2017-08-21 19:30:27 +02:00
Marcin Kuzminski
7c571b29bc ssh: fixed tests for disabled ssh support 2017-08-20 20:48:10 +02:00
Marcin Kuzminski
ededb0c7ff SSH: disable visually support ssh keys if we have them disabled in the .ini 2017-08-20 12:23:47 +02:00
Marcin Kuzminski
b7c17b192d ssh: added ssh key management into my account. 2017-08-19 17:47:01 +02:00
Marcin Kuzminski
034abca8dc ssh: embedded ssh support 
- updated command generation and added debug flag
- updated .ini config to have ALL required components to run SSH commands
- rcssh-wrapper now is embedded and pinned into version of enterprise
- update ssh_support configration
- implements #5343
 2017-08-18 14:32:00 +02:00
Marcin Kuzminski
3ea8958a92 ssh-keys: added admin panel for managing globally all SSH Keys. 
- added also option to manually update the keyfile
- fetch and show all user keys for audit purpose
 2017-08-17 22:46:26 +02:00
Marcin Kuzminski
429c3a56cb data-grid-app: added universal function for extracting ordering. 
- now supports format a.b
- supports passing a ref column e.g User.username, get's handy for joined querie
 2017-08-17 22:44:25 +02:00
Marcin Kuzminski
aca661a15e goto-switcher: optimized performance and query capabilities. 
- Previous implementation had on significant bug. The use of LIMIT 20
was limiting results BEFORE auth checks. In case of large ammount of similarly
named repositories user didn't had access too, the result goto search was empty.

This was becuase first 20 items fetched didn't pass permission checks and final
auth list was empty.

To fix this we now use proper filtering for auth using SQL. It means we first check
user allowed repositories, and add this as a filter so end result from database is already
to only the accessible repositories.
 2017-08-16 22:46:34 +02:00
Marcin Kuzminski
e8ec2b950f goto-switcher: use special commit: prefix to explicitly search for commits. 
- previous solution could make the go-to swticher slow in case of huge search index
- mixing repository names and commit names could lead to bad UX when searching
- explicit case still allows this, but user is in the control how and what he wants to search
- fixes #5375
 2017-08-15 21:33:01 +02:00
Marcin Kuzminski
79fef17c51 release: merge back stable branch into default 2017-08-14 11:57:47 +02:00
Marcin Kuzminski
0012823054 docs: updated svn configuration to prevent 400 errors on certain Apache versions. 2017-08-12 19:20:06 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid. 
- fixed few small found problems
- code cleanups
 2017-08-11 13:00:47 +02:00
Marcin Kuzminski
b98b5eaaa8 auth: added @LoginRequired() decorators for user/user_group views. 
- not really a secirity issue but for consistency we should have them (also provides nicer redirects)
 2017-08-03 22:17:38 +02:00
Marcin Kuzminski
c56bb0da4b core: removed usage of global pylons config in base lib. 2017-08-03 21:59:49 +02:00
Marcin Kuzminski
2cc3df1920 users/user_groups: ported permission summary pages into pyramid. 
- added JSON views for extraction of parameters in parasable format.
 2017-08-03 20:18:49 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
bb544cbad6 auth: allow binding the whitelist views to specific tokens 2017-08-03 18:54:52 +02:00
Marcin Kuzminski
945777cf9c ssh: added support for auto generating authorized_keys from stored ssh keys. 2017-08-03 16:36:16 +02:00
Marcin Kuzminski
35cefa9b2d users: added SSH key management for user admin pages 2017-08-03 16:35:13 +02:00
Marcin Kuzminski
1c20025ca7 pyramid: use a faster scan method for faster app start. 2017-08-02 11:01:36 +02:00
Marcin Kuzminski
2c11516c9b routing: optionally use explicit db object on route. 
- makes it harder to integrate plugins
- makes it consistent on other places
- allows some plugins to use just the names
 2017-08-01 22:59:15 +02:00
Marcin Kuzminski
05386904e7 forks: moved pylons code into pyramid. 2017-08-01 11:48:16 +02:00
Marcin Kuzminski
42117ffb8e user-group-admin: use a proper auth filter. 
- we now use an full sql based perm check based on an earlier fetch of allowed IDS
- fixes problem with sql limit/filter and later filterint that by auth.
- can be optimized later
 2017-07-29 22:44:25 +02:00
Marcin Kuzminski
3430eb74e5 repositories: ported repo_creating checks to pyramid. 
- fixed security issues with resource discovery.
- ported repository creating check into base view for repos.
 2017-07-28 15:56:06 +02:00
Marcin Kuzminski
21efeeab37 repositories: handle in a nicer way a filesystem damaged repositories. 
- redirect with proper flash message about damaged filesystem.
 2017-07-28 15:23:45 +02:00
Marcin Kuzminski
ab192470e0 process-management: dont rely on vcsserver code. 2017-07-28 01:24:06 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00
Marcin Kuzminski
015ea42459 pull-request: code cleanup 
- use stricter checks
- pull_request_id should be taken from object to cast to INT
- unified some code usage
 2017-07-27 22:48:09 +02:00
Marcin Kuzminski
b8804925c3 pull-requests: fix deletion of comments and make the test actually test this ! 
- broken test failed to detect obvious error on comment deletion
 2017-07-27 14:46:02 +02:00
Marcin Lulek
e4f789f3f7 pull-requests: fixed tests. 2017-07-27 14:39:21 +02:00
Marcin Kuzminski
b203d5f208 pull-requests: migrated code from pylons to pyramid 2017-07-27 11:30:55 +02:00
Daniel Dourvaris
891de4a613 files: fixed few found issues. 
- ensure non-relative paths are used after migration
- redirect to summary for empty repositories instead of commit page that gives 404
 2017-07-26 18:06:16 +02:00
Marcin Kuzminski
93c5a7f9c5 compare: migrated code from pylons to pyramid views. 2017-07-26 13:28:45 +02:00
Marcin Kuzminski
4de255d013 core: no longer rely on webob exception inside get_or_404 function. 
- relly on pyramid exc only
- helps reduce number of appenlight problems with 404 handling via webob
 2017-07-25 15:26:38 +02:00
Marcin Kuzminski
3f26df9f37 user: deprecated usage of api_keys. 
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
 2017-07-25 16:27:08 +02:00
Marcin Kuzminski
8efc4d92c5 repo-commits: ported changeset code into pyramid views. 
- refactored part of naming to use commit_id instead of revision
- renamed some parts to repo_commits instead of changeset without breaking backward compat
- small improvements and fixes for tests
 2017-07-24 17:04:14 +02:00
Marcin Kuzminski
5b3187fdf9 auth-token: fix way we generate entries inside the list of whitelist names. 
the dotted notation is incompatible with how we check those functions using ':' separator.
 2017-07-24 15:07:17 +02:00