Commit graph

1068 commits

Author SHA1 Message Date
Tom Hughes
58d889436f Fix various routing and route generation errors 2012-03-09 23:15:39 +00:00
Tom Hughes
6391ea5a7a Remove method tests that are now enforced by the routes 2012-03-09 20:19:55 +00:00
Tom Hughes
b012617608 Save the user record after changing it 2012-03-09 00:21:08 +00:00
Tom Hughes
4dfe43c956 Fix typo 2012-03-08 23:17:38 +00:00
Tom Hughes
88541c523d Use normal assignment instead of mass assignment 2012-03-08 22:41:25 +00:00
Tom Hughes
1340fca8f1 Turn on mass assignment protection
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
2012-03-06 08:54:45 +00:00
Tom Hughes
232e04ab9b Use a consistent host name in cache keys 2012-03-04 10:27:34 +00:00
Tom Hughes
e7a0302e2b Update the username cookie when the display name is changed 2012-03-03 00:49:03 +00:00
Steve Singer
1944372af8 Add a view to show diary comments left by a user 2012-02-28 21:29:18 +00:00
Tom Hughes
7c3a4b497e Change session expiry to 28 days when "remember me" is set
The expiry is passed directly to memcache, which treats any value
over 30 days as an absolute time, so using 1 month leads to sessions
expiring as soon as they are created.
2012-02-27 09:01:48 +00:00
Tom Hughes
af13c42322 Refactor session persistence code 2012-02-26 21:44:17 +00:00
Tom Hughes
346b097d85 Fix bad database query for RSS feeds of trace file tags 2012-02-19 11:48:33 +00:00
Tom Hughes
8d52069b00 Avoid double render error 2012-02-19 11:04:59 +00:00
Tom Hughes
ac48c6a16f Explicitly disable the layout for actions which don't want it 2012-02-15 17:48:17 +00:00
Tom Hughes
e2b185133e ActionController::UnknownAction is now AbstractController::ActionNotFound 2012-02-15 17:48:16 +00:00
Tom Hughes
8afc736536 Revert "Log locale selection"
This reverts commit 101ee6ade2.
2012-02-14 15:47:21 +00:00
Tom Hughes
101ee6ade2 Log locale selection 2012-02-14 14:57:29 +00:00
Tom Hughes
2b326acc32 Allow the copyright page to be requested in any locale 2012-02-14 11:54:22 +00:00
Tom Hughes
a16b45eb6a Add convenience methods to make ACL use simpler 2012-02-08 22:38:02 +00:00
Tom Hughes
8eef66cee2 Don't check the ACL unless we're creating a new user 2012-02-08 22:35:13 +00:00
Tom Hughes
cd43529cc8 Add support for domain based ACLs 2012-02-08 21:40:21 +00:00
Tom Hughes
2c666b42d7 Fix exception when a suspended user tries to login 2012-01-23 14:31:06 +00:00
Tom Hughes
8ba74c581d Add an ACL check to allow trace downloads to be blocked 2012-01-17 17:43:32 +00:00
Tom Hughes
3369743d6c Revert "Increase the size of the diary RSS feed temporarily"
This reverts commit ccd7882bcf.
2012-01-16 17:50:23 +00:00
Tom Hughes
ccd7882bcf Increase the size of the diary RSS feed temporarily 2012-01-14 13:36:49 +00:00
Tom Hughes
f7df396cf2 Don't cache user specific diary entry lists 2012-01-07 15:43:27 +00:00
Tom Hughes
63cc3c195a Try really hard to find out if the real exception was a timeout
Helpfully rails manages to wrap the actual exception that occurred
in at least one, and sometimes two further levels of exception, one
of which does preserve the original exception except as text.
2012-01-07 15:03:25 +00:00
Tom Hughes
55dda7b184 Recognise wrapped timeout exceptions properly 2012-01-07 14:16:39 +00:00
Tom Hughes
c3f73a8028 No need to restrict friend's diary entries to public users 2012-01-07 11:54:07 +00:00
Mikel Maron
d878db0a9b Add some more social features
Add a view showing changesets by nearby users, and views showing
diary entries by friends and nearby users.
2012-01-07 11:54:07 +00:00
Tom Hughes
3aa1c46aef Use OSM::Timer (and hence SystemTimer) consistently 2012-01-06 09:13:52 +00:00
Tom Hughes
00a605a2a8 Use Timeout if SystemTimer isn't loaded 2012-01-06 09:11:23 +00:00
Tom Hughes
c182531149 Allow a special ODBL message to be displayed at login 2011-12-20 00:07:07 +00:00
Tom Hughes
99d901c2ec Display the right title for friends' changesets 2011-12-16 08:29:19 +00:00
Tom Hughes
9545ca4ff3 Force a login to see your friends' changesets 2011-12-16 08:27:57 +00:00
Tom Hughes
8dd6f9f52f Fix double render error 2011-12-16 08:25:59 +00:00
Tom Hughes
78db9e72bb Convert friend changeset selection to use Arel queries 2011-12-15 21:47:43 +00:00
Tom Hughes
9d94d41376 Detabify 2011-12-15 21:26:51 +00:00
Mikel Maron
ce829bcc7c Add support for viewing a list of your friends' changesets 2011-12-15 21:25:27 +00:00
Tom Hughes
7b01a8ae82 Look up email addresses case insensitively for password resets
If the email address entered is not found then try a case insensitive
lookup, and if that finds a single result then use it.
2011-12-13 17:42:42 +00:00
Tom Hughes
2fc9c8c05b Cope with no openid_url being supplied 2011-12-13 10:26:30 +00:00
Tom Hughes
49038a44d9 Validate email addresses before confirming them 2011-12-13 09:49:13 +00:00
Tom Hughes
ebf597971f Removed bogus attempt to look up the previous version
This lookup wasn't actually doing what the comment said it was doing
and I don't see any reason to output the previous details of the object
for a delete action.
2011-12-10 16:24:57 +00:00
Tom Hughes
bc07bf484b Make search work again 2011-11-27 17:40:23 +00:00
Tom Hughes
13289d4041 Switch from Prototype to jQuery 2011-11-26 00:22:31 +00:00
Tom Hughes
7e66fcbb1b Log any session that is reset due to a username mismatch 2011-11-24 09:42:04 +00:00
Tom Hughes
db616d347a Add feed action to relevant filters 2011-11-22 12:19:41 +00:00
Tom Hughes
7c621a6a04 Add the OAuth verifier to 1.0a callbacks correctly 2011-11-19 17:11:54 +00:00
Tom Hughes
be8164cf15 Generate correct URLs for changeset feeds 2011-11-19 12:42:37 +00:00
Tom Hughes
093651c208 Override oauth1_authorize pending a fixed version of oauth-plugin 2011-11-19 00:25:17 +00:00