Marcin Kuzminski
4de255d013
core: no longer rely on webob exception inside get_or_404 function.
...
- relly on pyramid exc only
- helps reduce number of appenlight problems with 404 handling via webob
2017-07-25 15:26:38 +02:00
Marcin Kuzminski
3f26df9f37
user: deprecated usage of api_keys.
...
- additionally we don't load secrets as they are never used (and are expensive to fetch)
- simplify fetching of details improves performance
2017-07-25 16:27:08 +02:00
Marcin Kuzminski
5b3187fdf9
auth-token: fix way we generate entries inside the list of whitelist names.
...
the dotted notation is incompatible with how we check those functions using ':' separator.
2017-07-24 15:07:17 +02:00
Marcin Kuzminski
3b524b7875
renderer: remove usage of old non request PartialRenderer
2017-07-24 09:59:48 +02:00
Marcin Kuzminski
dc2af71072
permissions: expose new view that lists all available views for usage in whitelist access.
2017-07-21 04:54:36 +02:00
Marcin Kuzminski
ff79205313
global-permissions: ported controller to pyramid view.
...
- fixed some other tests cases to rely on test routing
2017-07-20 15:04:36 +02:00
Marcin Kuzminski
7178db58ba
core: use new style pyramid partial renderer where possible.
2017-07-08 15:27:41 +02:00
Marcin Kuzminski
2489c0ed51
core: make pylons global be used in obsolete parts of the code.
...
- will help later cleanup of pylons specific code
2017-07-08 15:23:40 +02:00
Marcin Kuzminski
16cb1534cb
process-managemet: added simple page to monitor worker processes of RhodeCode.
2017-07-03 18:30:55 +02:00
Marcin Kuzminski
25436a7365
audit-logs: implemented full audit logs across application.
...
- Fixes #5321
- Api+web actions
- To be extended while we develop new features.
2017-06-21 12:03:14 +02:00
Marcin Lulek
a9ea42785b
security: fix self-xss inside the email add functionality.
2017-06-20 20:59:58 +02:00
Marcin Kuzminski
e5ba163e0c
audit-logs: consistent data between my-account and admin user logs.
2017-06-20 16:06:36 +02:00
Marcin Kuzminski
effa0f53ce
users-admin: moved views into pyramid for editing emails and ips.
...
- added audit-logging
- added few additional tests
2017-06-20 13:53:44 +02:00
Marcin Lulek
ad54b9a57d
security: use new safe escaped user attributes across the application.
...
- will fix all possible XSS attack vectors.
2017-06-19 15:14:02 +02:00
Marcin Lulek
0e6fcd4658
security: added missing csrf checks in few missing views.
2017-06-19 09:20:07 +02:00
Marcin Kuzminski
fc4694f91f
pyramid: removed pylons reference from apps.
...
- this can be completly removed from those views as they are pyramid only.
2017-06-06 13:35:05 +02:00
Marcin Kuzminski
7216dd64ff
audit-logs: introduced new view to replace admin journal.
...
- audit logs will represent the all important actions made inside the system
- raw view visible for super-admins
2017-05-19 10:33:10 +02:00
Marcin Kuzminski
27a8d62042
admin: fix wrong ext_json import from tools.
2017-05-16 21:26:18 +02:00
Marcin Kuzminski
c19a9fc11a
system-info: expose the common certificate file path.
2017-05-04 12:30:42 +02:00
Marcin Kuzminski
5369a394e0
user-audit: share same template for rendering audit logs between user and admin views.
2017-04-26 23:05:03 +02:00
Marcin Kuzminski
b595153ea8
user-groups: moved get_user_groups from RepoModel to UserGroupModel.
2017-04-19 16:52:24 +02:00
Marcin Kuzminski
0cf9a67567
admin-users: use new json_ext renderer
2017-04-19 14:34:19 +02:00
Marcin Kuzminski
0934da14b2
admin-users: fix wrong class name used.
2017-04-18 18:27:28 +02:00
Marcin Kuzminski
482cb6cd23
data-grid: create a common re-usable app with datagrid rendering helpers
2017-04-13 12:15:02 +02:00
Marcin Kuzminski
7b460b77f2
admin-users: replace the previous nullslast() with db independent solution.
...
ref #5277
2017-04-12 23:26:16 +02:00
Marcin Kuzminski
cf3ef7e295
admin-users: remove nullslast() as it's generally not mysql compatible.
...
- fixes #5277
2017-04-12 22:48:21 +02:00
Marcin Kuzminski
a5b6055c00
admin-users: add audit page to allow showing user actions in RhodeCode.
...
- this is a helper filter that allows to filter out admin journal for particular user.
- refs #5256
2017-03-23 13:50:55 +01:00
Bartłomiej Wołyńczyk
b5ec70cf90
admin-users: add view for user groups managment
...
model-repo: get_user_groups modified to return more information about user
model-user_group: 2 new methods added
tests-models: mocked repo test becouse of modifications in model
2017-03-21 20:51:18 +01:00
Marcin Kuzminski
4de571d91e
users: properly handle null values when sorting columns in user grid.
2017-03-15 15:03:23 +01:00
Marcin Kuzminski
800d32ba70
users: add sorting by last activity to the new users grid.
2017-03-15 12:55:02 +01:00
Marcin Kuzminski
a487205ee6
users: change last activity to re-use new column.
2017-03-15 12:51:59 +01:00
Marcin Kuzminski
4376a85b97
admin: simplify usage of admin prefix on admin routes.
2017-03-14 17:16:54 +01:00
Marcin Kuzminski
425494b0a5
pyramid-views: always register auth_user for via the base view.
...
- we always need this to be set anyway so we shouldn't repeat it.
2017-03-13 20:51:47 +01:00
Marcin Kuzminski
bbc650bed6
svn-support: move into apps module.
2017-03-13 19:03:39 +01:00
Marcin Kuzminski
2d72da38be
admin-users: use full ilike search on filtering
2017-03-08 13:05:26 +01:00
Marcin Kuzminski
f8631f5fec
admin-users: moved grid browsing to pyramid.
...
- fixed loading data to be lazy fetched.
- speeds up loading large user sets significantly
2017-03-07 21:17:02 +01:00
Marcin Kuzminski
ae271af5cc
tests: moved tests of admin user auth tokens into pyramid apps.
2017-03-08 11:46:43 +01:00
Marcin Kuzminski
08547c9d0d
admin: moved auth tokens into pyramid view.
...
- allows override to enable scoped tokens
2017-03-07 14:11:19 +01:00
Marcin Kuzminski
43080aad27
pyramid-admin: use new base app view in exchange of dedicated admin view.
...
- Previous admin view was the same as the new base, minus some common functions.
2017-03-05 22:45:17 +01:00
Marcin Kuzminski
ed0174e7a4
admin: moved admin pyramid into apps.
2017-03-02 20:23:26 +01:00