engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2089 commits 1 branch 0 tags 110 MiB
Commit graph

290 commits

Author SHA1 Message Date
Marcin Lulek
f42a5ca66b db: use LONGTEXT for mysql in user_logs. Fixes #5385, problem with mysql rejecting 
insert because of too long json data.

- simple case of lots of users in user group can cause mysql to fail on insert
 2017-09-12 13:35:35 +02:00
Marcin Kuzminski
0fd76867b6 auth-tokens: allow specifing custom expiration date manually. 
- fixes #5323
 2017-09-08 18:03:35 +02:00
Marcin Kuzminski
56bbe6261a pull-request-events: add audit data for pull_request.close action 2017-09-08 16:04:22 +02:00
Marcin Kuzminski
2b8223498e pep8: cleanup code for permissions 2017-09-08 12:42:40 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
395cf5ac23 permissions: use same way of sorting of user_group permissions like user ones. 
- makes the display of objects in permission summary nicer to look at
 2017-08-24 22:28:28 +02:00
Marcin Kuzminski
990994942d pull-requests: use close action with proper --close-commit solution. 
- Mercurial settings are no long as LABS
- Unified some code between GIT and HG on rebase/close/delete feature branches
 2017-08-24 22:36:34 +02:00
Mathieu Cantin
761e973359 mercurial: Add option to close a branch before merging 2017-08-08 13:46:42 -04:00
Marcin Kuzminski
a9f61590e0 user/user-groups: show if users or user groups are a part of review rules. 
- cascade delete when deleting those so we still can remove the user or user group
- fixes #5377
 2017-08-24 21:01:22 +02:00
Marcin Kuzminski
57031945a3 pull-requests: use merge info to show how Pull requests will be merged. 
- rebase or merge commit is shown as merge strategy.
- close/delete branch are shown if that option is selected.
 2017-08-23 13:48:10 +02:00
Marcin Kuzminski
b7c17b192d ssh: added ssh key management into my account. 2017-08-19 17:47:01 +02:00
Marcin Kuzminski
aca661a15e goto-switcher: optimized performance and query capabilities. 
- Previous implementation had on significant bug. The use of LIMIT 20
was limiting results BEFORE auth checks. In case of large ammount of similarly
named repositories user didn't had access too, the result goto search was empty.

This was becuase first 20 items fetched didn't pass permission checks and final
auth list was empty.

To fix this we now use proper filtering for auth using SQL. It means we first check
user allowed repositories, and add this as a filter so end result from database is already
to only the accessible repositories.
 2017-08-16 22:46:34 +02:00
Marcin Kuzminski
928129ed6c repositories: rewrote whole admin section to pyramid. 
- fixed few small found problems
- code cleanups
 2017-08-11 13:00:47 +02:00
Marcin Kuzminski
2b15a05b94 comments: remove usage of pylons global config. 2017-08-04 14:29:09 +02:00
Marcin Kuzminski
c56bb0da4b core: removed usage of global pylons config in base lib. 2017-08-03 21:59:49 +02:00
Marcin Kuzminski
ee0e7c21f8 users: make AuthUser propert a method, and allow override of params. 2017-08-03 20:17:46 +02:00
Marcin Kuzminski
35cefa9b2d users: added SSH key management for user admin pages 2017-08-03 16:35:13 +02:00
Marcin Kuzminski
384dcf30c0 db: use consistent order of auth-tokens and emails when fetching those from user. 2017-07-27 18:13:25 +02:00
Marcin Kuzminski
42d56172a4 user-groups: moved the display of user group into a pyramid view 2017-07-27 18:56:31 +02:00
Marcin Kuzminski
b203d5f208 pull-requests: migrated code from pylons to pyramid 2017-07-27 11:30:55 +02:00
Marcin Kuzminski
fa5dd62880 channelstream: push events with comments on single commits. 
- use wrapper for posting to simplify the code.
 2017-07-26 18:04:56 +02:00
Marcin Kuzminski
ae8340ad2a db: use a wrapper on pull requests _last_merge_status to ensure this is always INT. 
- after upgrade of sqlalchemy this is casted to Long
- for backward compat we cast it as Int
 2017-07-26 12:16:25 +02:00
Marcin Kuzminski
708f22ac87 db: use unicode for some of the defaults to reduce sqlalchemy warnings. 2017-07-26 12:14:56 +02:00
Marcin Kuzminski
78e4f7d2f1 db: removed two redundant indexes found by never sqlalchemy 2017-07-26 07:45:42 +02:00
Marcin Kuzminski
4de255d013 core: no longer rely on webob exception inside get_or_404 function. 
- relly on pyramid exc only
- helps reduce number of appenlight problems with 404 handling via webob
 2017-07-25 15:26:38 +02:00
Marcin Kuzminski
0c1f7e3306 auth: improve logging 2017-07-25 15:07:43 +02:00
Marcin Kuzminski
3f26df9f37 user: deprecated usage of api_keys. 
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
 2017-07-25 16:27:08 +02:00
Marcin Kuzminski
3b524b7875 renderer: remove usage of old non request PartialRenderer 2017-07-24 09:59:48 +02:00
Marcin Kuzminski
72eb573560 users: made the function for account deactivation easier to use inside ishell. 2017-07-24 11:51:07 +02:00
Marcin Kuzminski
ff79205313 global-permissions: ported controller to pyramid view. 
- fixed some other tests cases to rely on test routing
 2017-07-20 15:04:36 +02:00
Marcin Kuzminski
4f16a9a411 repository-groups: introduce last change for repository groups. 2017-07-20 12:59:53 +02:00
Daniel Dourvaris
7add053ff8 users: add additional information why user with pending reviews shouldn't be deleted. 2017-07-13 22:40:12 +02:00
Marcin Kuzminski
8ff5e04569 notifications: removed usage of pylons translation from models. 2017-07-13 17:58:15 +02:00
Marcin Kuzminski
580a0d0ea5 notifications: ported views to pyramid 2017-07-13 18:28:31 +02:00
Marcin Kuzminski
c650cdddcc pyramid: if possible fetch csrf tokens from pyramid session. 
- we need to explicitly pass in requests into secure forms
- allows to not use pylons global session for fetching csrf tokens
 2017-07-13 12:35:42 +02:00
Marcin Kuzminski
ea17d0aac2 pyramid: don't use pylons translation string in db models. 2017-07-13 12:32:59 +02:00
Marcin Kuzminski
4a9be66cd1 dependencies: bumped pyramid-debugtoolbar to 4.3.1 2017-07-12 22:55:39 +02:00
Marcin Kuzminski
7178db58ba core: use new style pyramid partial renderer where possible. 2017-07-08 15:27:41 +02:00
Daniel Dourvaris
93b6dfba9a gists: migrated gists controller to pyramid view. 2017-07-07 12:05:30 +02:00
Marcin Kuzminski
979f4b8bec repo-model: don't rely on global pylons context variable to fetch the clone uri template. 2017-07-07 10:26:11 +02:00
Marcin Kuzminski
2500061c51 auth-token: only delete token if it exists. 2017-06-26 13:55:07 +02:00
Marcin Kuzminski
9c7ed2caf3 user-api: use simple schema validator to be consistent how we validate between API and web views. 2017-06-21 15:36:24 +02:00
Marcin Kuzminski
749f784ad9 user-group-api: use simple schema validator to be consistent how we validate 
user group names during creation between API and WEB.
 2017-06-21 13:28:12 +02:00
Marcin Lulek
af07c911dc security: use safe escaped version of description for repo and repo group to potentially 
prevent any XSS attacks on returned data.
 2017-06-21 12:23:46 +02:00
Marcin Kuzminski
25436a7365 audit-logs: implemented full audit logs across application. 
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
 2017-06-21 12:03:14 +02:00
Marcin Lulek
3aa700c435 security: escape the returned paths of files and directories. 
Nodes function is used for autocomplete in files view, it prevents from
XSS type of attack in file search.
 2017-06-20 20:02:24 +02:00
Marcin Kuzminski
37c0465603 my-account: use audit logs for email and token actions. 2017-06-20 13:23:15 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application. 
- will fix all possible XSS attack vectors.
 2017-06-19 15:14:02 +02:00
Marcin Lulek
91e65dd798 User: use new escaped hybrid properties for usage in code. 
- Allows introducing the safer method of reading first/last names from users.
 2017-06-19 10:56:31 +02:00
Marcin Kuzminski
aa3bffd198 pull-requests: prepare the migration of pull request to pyramid. 
- this is half the code because of problems found during porting
- partially moved the urls, and flipped the logic into pyramid code
- needs more work in core for full switch.
 2017-06-19 13:25:15 +02:00