Tom Hughes
58d889436f
Fix various routing and route generation errors
2012-03-09 23:15:39 +00:00
Tom Hughes
6391ea5a7a
Remove method tests that are now enforced by the routes
2012-03-09 20:19:55 +00:00
Tom Hughes
b012617608
Save the user record after changing it
2012-03-09 00:21:08 +00:00
Tom Hughes
4dfe43c956
Fix typo
2012-03-08 23:17:38 +00:00
Tom Hughes
88541c523d
Use normal assignment instead of mass assignment
2012-03-08 22:41:25 +00:00
Tom Hughes
1340fca8f1
Turn on mass assignment protection
...
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
2012-03-06 08:54:45 +00:00
Tom Hughes
232e04ab9b
Use a consistent host name in cache keys
2012-03-04 10:27:34 +00:00
Tom Hughes
e7a0302e2b
Update the username cookie when the display name is changed
2012-03-03 00:49:03 +00:00
Steve Singer
1944372af8
Add a view to show diary comments left by a user
2012-02-28 21:29:18 +00:00
Tom Hughes
7c3a4b497e
Change session expiry to 28 days when "remember me" is set
...
The expiry is passed directly to memcache, which treats any value
over 30 days as an absolute time, so using 1 month leads to sessions
expiring as soon as they are created.
2012-02-27 09:01:48 +00:00
Tom Hughes
af13c42322
Refactor session persistence code
2012-02-26 21:44:17 +00:00
Tom Hughes
346b097d85
Fix bad database query for RSS feeds of trace file tags
2012-02-19 11:48:33 +00:00
Tom Hughes
8d52069b00
Avoid double render error
2012-02-19 11:04:59 +00:00
Tom Hughes
ac48c6a16f
Explicitly disable the layout for actions which don't want it
2012-02-15 17:48:17 +00:00
Tom Hughes
e2b185133e
ActionController::UnknownAction is now AbstractController::ActionNotFound
2012-02-15 17:48:16 +00:00
Tom Hughes
8afc736536
Revert "Log locale selection"
...
This reverts commit 101ee6ade2
.
2012-02-14 15:47:21 +00:00
Tom Hughes
101ee6ade2
Log locale selection
2012-02-14 14:57:29 +00:00
Tom Hughes
2b326acc32
Allow the copyright page to be requested in any locale
2012-02-14 11:54:22 +00:00
Tom Hughes
a16b45eb6a
Add convenience methods to make ACL use simpler
2012-02-08 22:38:02 +00:00
Tom Hughes
8eef66cee2
Don't check the ACL unless we're creating a new user
2012-02-08 22:35:13 +00:00
Tom Hughes
cd43529cc8
Add support for domain based ACLs
2012-02-08 21:40:21 +00:00
Tom Hughes
2c666b42d7
Fix exception when a suspended user tries to login
2012-01-23 14:31:06 +00:00
Tom Hughes
8ba74c581d
Add an ACL check to allow trace downloads to be blocked
2012-01-17 17:43:32 +00:00
Tom Hughes
3369743d6c
Revert "Increase the size of the diary RSS feed temporarily"
...
This reverts commit ccd7882bcf
.
2012-01-16 17:50:23 +00:00
Tom Hughes
ccd7882bcf
Increase the size of the diary RSS feed temporarily
2012-01-14 13:36:49 +00:00
Tom Hughes
f7df396cf2
Don't cache user specific diary entry lists
2012-01-07 15:43:27 +00:00
Tom Hughes
63cc3c195a
Try really hard to find out if the real exception was a timeout
...
Helpfully rails manages to wrap the actual exception that occurred
in at least one, and sometimes two further levels of exception, one
of which does preserve the original exception except as text.
2012-01-07 15:03:25 +00:00
Tom Hughes
55dda7b184
Recognise wrapped timeout exceptions properly
2012-01-07 14:16:39 +00:00
Tom Hughes
c3f73a8028
No need to restrict friend's diary entries to public users
2012-01-07 11:54:07 +00:00
Mikel Maron
d878db0a9b
Add some more social features
...
Add a view showing changesets by nearby users, and views showing
diary entries by friends and nearby users.
2012-01-07 11:54:07 +00:00
Tom Hughes
3aa1c46aef
Use OSM::Timer (and hence SystemTimer) consistently
2012-01-06 09:13:52 +00:00
Tom Hughes
00a605a2a8
Use Timeout if SystemTimer isn't loaded
2012-01-06 09:11:23 +00:00
Tom Hughes
c182531149
Allow a special ODBL message to be displayed at login
2011-12-20 00:07:07 +00:00
Tom Hughes
99d901c2ec
Display the right title for friends' changesets
2011-12-16 08:29:19 +00:00
Tom Hughes
9545ca4ff3
Force a login to see your friends' changesets
2011-12-16 08:27:57 +00:00
Tom Hughes
8dd6f9f52f
Fix double render error
2011-12-16 08:25:59 +00:00
Tom Hughes
78db9e72bb
Convert friend changeset selection to use Arel queries
2011-12-15 21:47:43 +00:00
Tom Hughes
9d94d41376
Detabify
2011-12-15 21:26:51 +00:00
Mikel Maron
ce829bcc7c
Add support for viewing a list of your friends' changesets
2011-12-15 21:25:27 +00:00
Tom Hughes
7b01a8ae82
Look up email addresses case insensitively for password resets
...
If the email address entered is not found then try a case insensitive
lookup, and if that finds a single result then use it.
2011-12-13 17:42:42 +00:00
Tom Hughes
2fc9c8c05b
Cope with no openid_url being supplied
2011-12-13 10:26:30 +00:00
Tom Hughes
49038a44d9
Validate email addresses before confirming them
2011-12-13 09:49:13 +00:00
Tom Hughes
ebf597971f
Removed bogus attempt to look up the previous version
...
This lookup wasn't actually doing what the comment said it was doing
and I don't see any reason to output the previous details of the object
for a delete action.
2011-12-10 16:24:57 +00:00
Tom Hughes
bc07bf484b
Make search work again
2011-11-27 17:40:23 +00:00
Tom Hughes
13289d4041
Switch from Prototype to jQuery
2011-11-26 00:22:31 +00:00
Tom Hughes
7e66fcbb1b
Log any session that is reset due to a username mismatch
2011-11-24 09:42:04 +00:00
Tom Hughes
db616d347a
Add feed action to relevant filters
2011-11-22 12:19:41 +00:00
Tom Hughes
7c621a6a04
Add the OAuth verifier to 1.0a callbacks correctly
2011-11-19 17:11:54 +00:00
Tom Hughes
be8164cf15
Generate correct URLs for changeset feeds
2011-11-19 12:42:37 +00:00
Tom Hughes
093651c208
Override oauth1_authorize pending a fixed version of oauth-plugin
2011-11-19 00:25:17 +00:00