Commit graph

69 commits

Author SHA1 Message Date
Tom Hughes
69c2400997 Add a warning about whitelisting webmaster@openstreetmap.org in antispam
systems.
2009-05-09 16:46:36 +00:00
Tom Hughes
5449cf4adc Merge 14394:14533 from trunk. 2009-04-16 21:11:12 +00:00
Tom Hughes
09fdee5493 Add a "database readonly" state that allows all writes to the database
to be suppressed.
2009-04-14 14:27:30 +00:00
Shaun McDonald
0f25285ab6 More tests, found a bug in the data browser, no fix yet. Fix db readme. Don't show the signup page to logged in users, by redirecting them to the home page. Remove unnessesary begin blocks in the browse controller. 2009-04-12 23:20:31 +00:00
Tom Hughes
c8ee135104 Merge 12304:14009 from trunk. 2009-03-08 13:02:37 +00:00
Tom Hughes
10b71ba2f6 Add an ACL system to allow key/value pairs to be attached to blocks
of IP addresses, and implement an ACL restriction that allows account
creation to be blocked.
2009-02-19 13:47:43 +00:00
Shaun McDonald
eb9138813c Return, rather than allow a second render to happen. Closes #1407 2008-12-14 23:16:27 +00:00
Shaun McDonald
814822120a Don't give an error when you access the login page when you are logged in. Instead take you to the page in the referer or the home page. 2008-12-11 15:05:53 +00:00
Shaun McDonald
bf29550db8 Resyncing from head 10895:11795 2008-11-08 11:52:58 +00:00
Andy Allan
7058d836f7 use boolean flags when using boolean columns 2008-11-07 13:24:18 +00:00
Tom Hughes
2ccbc55236 Log the IP address used to create an account. 2008-10-12 23:20:28 +00:00
Tom Hughes
d6b05a8da9 Run web authorisation for all non-api requests. Closes #1152. 2008-09-07 15:07:44 +00:00
Tom Hughes
34189cf761 Add basic support for logically deleting a user. 2008-08-24 16:53:42 +00:00
Tom Hughes
967f44ffac Don't user flash[:notice] when we're not redirecting as it will
persist to the next request and cause confusion.
2008-08-13 11:44:53 +00:00
Tom Hughes
64ecd02f0b Allow users to change their email address. Closes #546. 2008-08-13 11:39:33 +00:00
Tom Hughes
f8367c3ee1 Allow a user's email address to be marked invalid, and suppress most
notification mails for such users.
2008-08-13 10:45:49 +00:00
Shaun McDonald
b2515ec75e Sorts out a problem with the description field and adding users. 2008-07-08 13:43:56 +00:00
Tom Hughes
1e98eb9950 Allow users to remove their image. Closes #1010. 2008-07-07 23:26:41 +00:00
Tom Hughes
2cf15b549e Add support for putting the site in an offline mode where it operates
without a database but with most features disabled.
2008-06-22 12:10:32 +00:00
Tom Hughes
48000eb09a Require a form post to finally confirm an account to stop
accidental confirmations.
2008-05-29 20:43:58 +00:00
Steve Coast
4b3c207a81 add individual user preference read/write, and default all new users to having public data 2008-05-03 12:57:48 +00:00
Tom Hughes
a1378a6bd4 Report a friendly error for attempts to reference a user that does
not exist. Closes #805.
2008-04-27 12:21:32 +00:00
Tom Hughes
1c6a83f0e8 Fix stupid breakage. Closes #708. 2008-02-24 13:43:42 +00:00
Steve Coast
cacf1879c3 user images 2008-02-23 15:18:59 +00:00
Steve Coast
7dbc27fd67 Show nearby users map in account view page 2008-01-21 17:15:33 +00:00
Dan Karran
d320673cc7 Improving friend capabilities so you can now add and remove friends as you wish. Friends will be notified when you add them. You can view a list of friends on your profile page (which has been reorganised a little). 2007-10-08 22:21:15 +00:00
Tom Hughes
755a2c596c Add additional validation to the user model and tidy up a few things on
the account options page.
2007-08-19 12:27:23 +00:00
Tom Hughes
0a8c26e596 Various updates to the user management, including the creation of a
preferences table and moving tokens into a tokens table so that a user
can have more than one.
2007-08-14 23:07:38 +00:00
Tom Hughes
183841d10e Return "404 Not Found" for users and traces which don't exist. 2007-08-09 07:45:04 +00:00
Tom Hughes
8b0e3c1515 Removed unused preferences method from the user controller - the field
no longer exists anyway so it was not at all useful.
2007-07-31 08:21:16 +00:00
Tom Hughes
4d1633585f Don't include passwords in the request log. 2007-07-19 08:57:03 +00:00
Tom Hughes
344fced9a6 Remove require_user for the api_details method as that uses HTTP authentication.
Also set the content type for API responses.
2007-06-29 10:33:14 +00:00
Steve Coast
5a66dbf907 add mappam... also stuff in user controller that must have been done by TomH? 2007-06-29 10:18:08 +00:00
Tom Hughes
dcad29dad0 Split the rest action into sparate read, update and delete actions thus
allowing authorization to be done on a per-action basis without worring
about the method. This should make the user API work.

Also do a lot of cleanup of the controllers.
2007-06-27 17:27:10 +00:00
Tom Hughes
1017c4c39a Make per-user diary entry lists go through the diary_entry controller so
that we aren't duplicating everything in the user controller.

This also makes per-user RSS feeds work, and makes links to specific posts
work properly so that the RSS feeds behave sensibly.
2007-06-23 12:41:58 +00:00
Tom Hughes
8c8d55736f Tell users if the reason they can't login is because they haven't activated
their account yet.
2007-06-18 07:27:39 +00:00
Tom Hughes
0e66875ace Make it clear that new accounts need to be actived by clicking on the
confirm link in the email before they can be used.
2007-06-18 07:20:08 +00:00
Dan Karran
072b0717e4 Adding titles to some more pages, adding a redirect after sent messages and setting correct XML content-type header for RSS feeds. 2007-06-16 20:38:14 +00:00
Tom Hughes
235999b835 When a new user confirms their email address, log them automatically and
redirect them to their account page so they can set their home location
and description if they want.
2007-06-14 23:55:26 +00:00
Tom Hughes
2afcb4b222 Allow users to change their password from the account page, and get rid
of the separate edit page that (partially) duplicated the account page.
2007-06-12 00:28:53 +00:00
Tom Hughes
d27ff25473 Improve handling of login/logout some more to improve the chances of
us ending up on the right page afterwards.
2007-06-11 23:49:03 +00:00
Tom Hughes
457d66eb5b Mark user as active when issuing a new password - this allows users who
forgot to activate their account to do so by going through the lost password
procedure, which effectively revalidates their email address.
2007-06-09 23:08:18 +00:00
Tom Hughes
a187c759b7 Validate passwords properly when creating an account. Fixes #419. 2007-06-09 22:56:18 +00:00
Dan Karran
8b240b982b #493: tweaking some notification messages in user_controller. 2007-06-07 14:36:13 +00:00
Richard Fairhurst
4769eec5aa TomH's patches 2007-05-28 14:54:50 +00:00
Damian Sulewski
461bf3802d applied TomH patch for lost password site 2007-05-26 20:58:33 +00:00
John McKerrell
3296514ab8 Adding display name to go_public method to fix follow on page. 2007-05-05 15:01:40 +00:00
Nick Black
7bcda2794f resolved user.rb conflict 2007-05-05 14:24:08 +00:00
Nick Black
078301a780 messaging stuff 2007-05-05 12:29:44 +00:00
Nick Black
8bd09c0828 map view defaults to a home lat and lon 2007-04-30 09:57:54 +00:00