Commit graph

40 commits

Author SHA1 Message Date
Marcin Kuzminski
4de255d013 core: no longer rely on webob exception inside get_or_404 function.
- relly on pyramid exc only
- helps reduce number of appenlight problems with 404 handling via webob
2017-07-25 15:26:38 +02:00
Marcin Kuzminski
3f26df9f37 user: deprecated usage of api_keys.
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
2017-07-25 16:27:08 +02:00
Marcin Kuzminski
5b3187fdf9 auth-token: fix way we generate entries inside the list of whitelist names.
the dotted notation is incompatible with how we check those functions using ':' separator.
2017-07-24 15:07:17 +02:00
Marcin Kuzminski
3b524b7875 renderer: remove usage of old non request PartialRenderer 2017-07-24 09:59:48 +02:00
Marcin Kuzminski
dc2af71072 permissions: expose new view that lists all available views for usage in whitelist access. 2017-07-21 04:54:36 +02:00
Marcin Kuzminski
ff79205313 global-permissions: ported controller to pyramid view.
- fixed some other tests cases to rely on test routing
2017-07-20 15:04:36 +02:00
Marcin Kuzminski
7178db58ba core: use new style pyramid partial renderer where possible. 2017-07-08 15:27:41 +02:00
Marcin Kuzminski
2489c0ed51 core: make pylons global be used in obsolete parts of the code.
- will help later cleanup of pylons specific code
2017-07-08 15:23:40 +02:00
Marcin Kuzminski
16cb1534cb process-managemet: added simple page to monitor worker processes of RhodeCode. 2017-07-03 18:30:55 +02:00
Marcin Kuzminski
25436a7365 audit-logs: implemented full audit logs across application.
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
2017-06-21 12:03:14 +02:00
Marcin Lulek
a9ea42785b security: fix self-xss inside the email add functionality. 2017-06-20 20:59:58 +02:00
Marcin Kuzminski
e5ba163e0c audit-logs: consistent data between my-account and admin user logs. 2017-06-20 16:06:36 +02:00
Marcin Kuzminski
effa0f53ce users-admin: moved views into pyramid for editing emails and ips.
- added audit-logging
- added few additional tests
2017-06-20 13:53:44 +02:00
Marcin Lulek
ad54b9a57d security: use new safe escaped user attributes across the application.
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Lulek
0e6fcd4658 security: added missing csrf checks in few missing views. 2017-06-19 09:20:07 +02:00
Marcin Kuzminski
fc4694f91f pyramid: removed pylons reference from apps.
- this can be completly removed from those views as they are pyramid only.
2017-06-06 13:35:05 +02:00
Marcin Kuzminski
7216dd64ff audit-logs: introduced new view to replace admin journal.
- audit logs will represent the all important actions made inside the system
- raw view visible for super-admins
2017-05-19 10:33:10 +02:00
Marcin Kuzminski
27a8d62042 admin: fix wrong ext_json import from tools. 2017-05-16 21:26:18 +02:00
Marcin Kuzminski
c19a9fc11a system-info: expose the common certificate file path. 2017-05-04 12:30:42 +02:00
Marcin Kuzminski
5369a394e0 user-audit: share same template for rendering audit logs between user and admin views. 2017-04-26 23:05:03 +02:00
Marcin Kuzminski
b595153ea8 user-groups: moved get_user_groups from RepoModel to UserGroupModel. 2017-04-19 16:52:24 +02:00
Marcin Kuzminski
0cf9a67567 admin-users: use new json_ext renderer 2017-04-19 14:34:19 +02:00
Marcin Kuzminski
0934da14b2 admin-users: fix wrong class name used. 2017-04-18 18:27:28 +02:00
Marcin Kuzminski
482cb6cd23 data-grid: create a common re-usable app with datagrid rendering helpers 2017-04-13 12:15:02 +02:00
Marcin Kuzminski
7b460b77f2 admin-users: replace the previous nullslast() with db independent solution.
ref #5277
2017-04-12 23:26:16 +02:00
Marcin Kuzminski
cf3ef7e295 admin-users: remove nullslast() as it's generally not mysql compatible.
- fixes #5277
2017-04-12 22:48:21 +02:00
Marcin Kuzminski
a5b6055c00 admin-users: add audit page to allow showing user actions in RhodeCode.
- this is a helper filter that allows to filter out admin journal for particular user.
- refs #5256
2017-03-23 13:50:55 +01:00
Bartłomiej Wołyńczyk
b5ec70cf90 admin-users: add view for user groups managment
model-repo: get_user_groups modified to return more information about user
model-user_group: 2 new methods added
tests-models: mocked repo test becouse of modifications in model
2017-03-21 20:51:18 +01:00
Marcin Kuzminski
4de571d91e users: properly handle null values when sorting columns in user grid. 2017-03-15 15:03:23 +01:00
Marcin Kuzminski
800d32ba70 users: add sorting by last activity to the new users grid. 2017-03-15 12:55:02 +01:00
Marcin Kuzminski
a487205ee6 users: change last activity to re-use new column. 2017-03-15 12:51:59 +01:00
Marcin Kuzminski
4376a85b97 admin: simplify usage of admin prefix on admin routes. 2017-03-14 17:16:54 +01:00
Marcin Kuzminski
425494b0a5 pyramid-views: always register auth_user for via the base view.
- we always need this to be set anyway so we shouldn't repeat it.
2017-03-13 20:51:47 +01:00
Marcin Kuzminski
bbc650bed6 svn-support: move into apps module. 2017-03-13 19:03:39 +01:00
Marcin Kuzminski
2d72da38be admin-users: use full ilike search on filtering 2017-03-08 13:05:26 +01:00
Marcin Kuzminski
f8631f5fec admin-users: moved grid browsing to pyramid.
- fixed loading data to be lazy fetched.
- speeds up loading large user sets significantly
2017-03-07 21:17:02 +01:00
Marcin Kuzminski
ae271af5cc tests: moved tests of admin user auth tokens into pyramid apps. 2017-03-08 11:46:43 +01:00
Marcin Kuzminski
08547c9d0d admin: moved auth tokens into pyramid view.
- allows override to enable scoped tokens
2017-03-07 14:11:19 +01:00
Marcin Kuzminski
43080aad27 pyramid-admin: use new base app view in exchange of dedicated admin view.
- Previous admin view was the same as the new base, minus some common functions.
2017-03-05 22:45:17 +01:00
Marcin Kuzminski
ed0174e7a4 admin: moved admin pyramid into apps. 2017-03-02 20:23:26 +01:00