engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2076 commits 1 branch 0 tags 110 MiB
Commit graph

2076 commits

This branch
This branch
All branches
Author SHA1 Message Date
Marcin Kuzminski
fb91fac6f0 gunicorn: allow custom logger to set consistent formatting of requests for gunicorn with rhodecode logging. 2017-09-07 17:56:52 +02:00
Marcin Kuzminski
4e50794cfb auth: use consistent way of extracting came_from, and also sanitise it to remove 
auth_token. This prevents a loop of redirection in case we get redirected to login
with this parameter.
 2017-09-06 23:39:45 +02:00
Marcin Kuzminski
b2d0a83a08 routing: add convert license redirect route. 2017-09-06 22:32:43 +02:00
Marcin Lulek
bf1579532f repo-summary: don't push the url used for generation of summary preview. The url is 
internal for just changelog data. Fixes #5380.
 2017-09-06 19:15:48 +02:00
Marcin Lulek
a307f2677c feeds: generate entries with proper unique ids. 
- fixes #5379
 2017-09-01 16:05:06 +02:00
Daniel Dourvaris
8f02ca668c diffs: use whole chunk diff to calculate if it's oversized or not. 
- This fixes an issue if a file is added that has very large number of small lines.
In this case the time to detect if the diff should be limited was very very long and CPU intensive.
 2017-09-01 15:56:50 +02:00
Marcin Kuzminski
3f0ff6b65b vcs: report 404 for shadow repos that are not existing anymore. Before we got 500 exception in this case. 2017-09-01 13:10:52 +02:00
Marcin Kuzminski
a8abeb0d1c user-groups: rewrote the app to pyramid 
- added new event data with added/removed/changed permissions
- cleanup code and spelling
 2017-08-31 12:47:19 +02:00
Marcin Kuzminski
ee20d401c8 users: changed spelling of users_groups to user_groups. Because English :] 2017-08-29 15:46:26 +02:00
Marcin Kuzminski
48959fcd73 auth: don't double register the permission in case no inheritance is turned on 2017-08-28 12:56:04 +02:00
Marcin Kuzminski
c0899ff09d auth: expose a option to calculate how we end up having super-admin permission. 
This is now used only for visual display. The old way is still faster for permissions
calculation.

- the extended way will be used in permission summary showing a much more detailed
permission summary for super-admins.
 2017-08-27 19:30:42 +02:00
Marcin Kuzminski
54ad0eaea2 auth: use pesistent naming of keys in auth. Refactoring only. 2017-08-27 19:29:10 +02:00
Marcin Kuzminski
868ab0ed73 permissions: explicitly register all permissions set for user. Fixes #4217 
- in order to get a proper inheritance chain of permissions we'll register each step.
This allows to get full inheritance chain. Final permissions will be the same becuase
the only thing we change is we register each step before permissions final value.
- Also display the permissions summary in a nicer way more explicitly stating what
permissions overwrites which.
 2017-08-25 17:43:28 +02:00
Daniel Dourvaris
83e3196e55 initial-gravatars: fix case of dot beeing present before @domain. 2017-08-25 10:27:00 +02:00
Marcin Kuzminski
ebbfb35adf user-group: perms summary, fix view name. 2017-08-25 10:11:32 +02:00
Marcin Kuzminski
395cf5ac23 permissions: use same way of sorting of user_group permissions like user ones. 
- makes the display of objects in permission summary nicer to look at
 2017-08-24 22:28:28 +02:00
Marcin Kuzminski
1b6730d3c3 perms: fixed html error in template 2017-08-24 22:15:08 +02:00
Marcin Kuzminski
198094e646 mercurial: updated logging and function calls. 2017-08-24 18:49:20 +02:00
Marcin Kuzminski
bffc3ecda9 git: added identify command for checking the current checkout commit 2017-08-24 18:44:31 +02:00
Marcin Kuzminski
990994942d pull-requests: use close action with proper --close-commit solution. 
- Mercurial settings are no long as LABS
- Unified some code between GIT and HG on rebase/close/delete feature branches
 2017-08-24 22:36:34 +02:00
Mathieu Cantin
761e973359 mercurial: Add option to close a branch before merging 2017-08-08 13:46:42 -04:00
Marcin Kuzminski
a9f61590e0 user/user-groups: show if users or user groups are a part of review rules. 
- cascade delete when deleting those so we still can remove the user or user group
- fixes #5377
 2017-08-24 21:01:22 +02:00
Marcin Kuzminski
57031945a3 pull-requests: use merge info to show how Pull requests will be merged. 
- rebase or merge commit is shown as merge strategy.
- close/delete branch are shown if that option is selected.
 2017-08-23 13:48:10 +02:00
Marcin Kuzminski
c7704859cf pull-requests: in case of an error redirect to the same url as source. 
- will keep the bookmark/branch info, and help re-select proper revisions.
 2017-08-23 12:31:38 +02:00
Marcin Kuzminski
5a490b42a4 pull-requests: redirect to repo PR after delete instead of my account. 2017-08-22 22:29:38 +02:00
Marcin Kuzminski
34a59d2066 compare: make sure to not do any redirects for XHR requests types. 
This can lead to page-in-page rendering when using ajax compare loading.
 2017-08-23 13:02:37 +02:00
Marcin Kuzminski
565bfee4c7 files: removed some left over debug. 2017-08-24 17:45:18 +02:00
Marcin Kuzminski
890cb7ef61 search: per-repo search shouldn't require admin permissions. Read is enought because we access the repo only 2017-08-21 19:30:27 +02:00
Marcin Kuzminski
7c571b29bc ssh: fixed tests for disabled ssh support 2017-08-20 20:48:10 +02:00
Marcin Kuzminski
77566e197e config: update .ini file examples 2017-08-20 12:28:05 +02:00
Marcin Kuzminski
ededb0c7ff SSH: disable visually support ssh keys if we have them disabled in the .ini 2017-08-20 12:23:47 +02:00
Marcin Kuzminski
b7c17b192d ssh: added ssh key management into my account. 2017-08-19 17:47:01 +02:00
Marcin Kuzminski
034abca8dc ssh: embedded ssh support 
- updated command generation and added debug flag
- updated .ini config to have ALL required components to run SSH commands
- rcssh-wrapper now is embedded and pinned into version of enterprise
- update ssh_support configration
- implements #5343
 2017-08-18 14:32:00 +02:00
Marcin Kuzminski
3ea8958a92 ssh-keys: added admin panel for managing globally all SSH Keys. 
- added also option to manually update the keyfile
- fetch and show all user keys for audit purpose
 2017-08-17 22:46:26 +02:00
Marcin Kuzminski
42f25bce8e docs: updated Apache documentation for serving static files 2017-08-18 14:29:52 +02:00
Marcin Kuzminski
429c3a56cb data-grid-app: added universal function for extracting ordering. 
- now supports format a.b
- supports passing a ref column e.g User.username, get's handy for joined querie
 2017-08-17 22:44:25 +02:00
Marcin Lulek
c681c84320 security: use no-referrer for outside link to stop leaking potential parameters such 
as auth token stored inside GET flags.

- based on hacker-one ticket
 2017-08-17 10:55:07 +02:00
Marcin Kuzminski
aca661a15e goto-switcher: optimized performance and query capabilities. 
- Previous implementation had on significant bug. The use of LIMIT 20
was limiting results BEFORE auth checks. In case of large ammount of similarly
named repositories user didn't had access too, the result goto search was empty.

This was becuase first 20 items fetched didn't pass permission checks and final
auth list was empty.

To fix this we now use proper filtering for auth using SQL. It means we first check
user allowed repositories, and add this as a filter so end result from database is already
to only the accessible repositories.
 2017-08-16 22:46:34 +02:00
Marcin Kuzminski
dcedd44327 auth: added additional name filters to the acl helpers. 
- helps narrowing the results based on if we use a search param or not.
 2017-08-16 21:51:10 +02:00
Marcin Kuzminski
f539d88365 auth: added helpers to fetch IDs of repos/repo groups/user groups that 
user have access to.

- this can be used to do filtering by IDs and do SQL based ACLs
 2017-08-16 14:05:36 +02:00
Marcin Kuzminski
e8ec2b950f goto-switcher: use special commit: prefix to explicitly search for commits. 
- previous solution could make the go-to swticher slow in case of huge search index
- mixing repository names and commit names could lead to bad UX when searching
- explicit case still allows this, but user is in the control how and what he wants to search
- fixes #5375
 2017-08-15 21:33:01 +02:00
Marcin Kuzminski
a02eb262c4 docs: updated enable celery documentation 2017-08-14 17:32:13 +02:00
Marcin Kuzminski
281b30f2c8 dependencies: bumped rhodecode-tools to 0.13.0 with latest .ini templates 2017-08-14 13:34:23 +02:00
Marcin Kuzminski
a2daf294e6 ini: updated small found problems. 2017-08-14 13:33:58 +02:00
Marcin Kuzminski
460ce30227 dependencies: bumped Pyramid to 1.9.1 2017-08-14 12:18:36 +02:00
Marcin Kuzminski
71a5a458fb dependencies: bumped Mako to 1.0.7 2017-08-14 12:18:05 +02:00
Marcin Kuzminski
9f702007c6 dependencies: freeze bleach library version. 
- this is a Jupyter notebooks dependency, and bumps lots of libraries. Better to
have a control over this to be on the safe side
 2017-08-14 12:17:41 +02:00
Marcin Kuzminski
df1f73ec33 dependencies: bumped pandadoc_filters to 1.4.2 2017-08-14 12:15:25 +02:00
Marcin Kuzminski
4b64815bfc dependencies: bumped prompt_toolkit to 1.0.15 2017-08-14 12:14:55 +02:00
Marcin Kuzminski
272735aef3 nix: bumped internal nix file after version bump. 2017-08-14 12:14:26 +02:00