Andy Allan
c24b0e9399
Rework to ensure views are named after the controller method name
2019-06-26 13:45:40 +02:00
Tom Hughes
d2d5d48f29
Allow signups to be blocked by MX host
2019-06-23 11:21:03 +01:00
Andy Allan
d33b1f6b29
Pass the models, not the ids, when dealing with friendships
2019-06-19 16:56:31 +02:00
Andy Allan
2169c503ef
Rename user.friend_users to user.friends
...
This is possible now since we've renamed Friend to Friendship
2019-06-19 16:51:35 +02:00
Andy Allan
1cf8fec58d
Rename Friend model to Friendship
...
This better describes what the model represents, which is the relationship
between the two users.
2019-06-19 16:39:25 +02:00
Tom Hughes
24b138db09
Merge remote-tracking branch 'upstream/pull/2228'
2019-06-12 19:16:32 +01:00
Andy Allan
9e158a5d39
Show all diary comments to administrators
2019-06-06 16:03:42 +02:00
Andy Allan
fdffd22cca
Allow admins to unhide diary comments, if they wish
2019-06-06 16:03:42 +02:00
Andy Allan
49fc17c6b6
Show deleted diary entries to administrators, if the user isn't also deleted
...
This will allow administrators to review diary entry deletions from non-spam users.
2019-06-06 15:59:47 +02:00
Andy Allan
f2f3fbb1f1
Allow administrators to unhide diary entries, if they wish
2019-06-06 15:59:47 +02:00
Tom Hughes
e49953f141
Merge remote-tracking branch 'upstream/pull/2239'
2019-05-29 17:41:08 +01:00
Andy Allan
6ed749e7eb
Allow a configurable delay to keep diary entries from being published in feeds
...
This is to provide another tool to help spam fighting.
The configuration value is set to zero hours for new deploys in
order to be 'least surprising'. You can change the setting without
interfering with your test suite.
2019-05-29 16:56:15 +02:00
Andy Allan
b7893df84e
Refactor diary entries to use create and update methods
...
This brings it slightly more into line with resourceful routing.
2019-05-29 15:37:23 +02:00
mmd-osm
b97e8d5427
Remove SWF gpx trackpoints feature for Potlatch1
2019-05-19 15:17:14 +02:00
Simon Poole
1be8d599e8
Add checkbox for contributor terms and improve text
2019-05-13 16:54:29 +02:00
Simon Poole
fa81a608f7
Remove unnecessary test for 0
2019-05-13 16:54:29 +02:00
Simon Poole
e30813bbb1
Rubocop fixes and increase per method complexity limit from 23 to 25
2019-05-13 16:54:29 +02:00
Simon Poole
6d7a713c12
Require that tou_read checkbox is set
2019-05-13 16:54:29 +02:00
Simon Poole
077834704e
Add links to the ToU and include them in signup
...
- this adds links to the ToU in the Welcome box and on the About page
- adds a timestamp column to the users table to record acceptance of the ToU
- require ToU to be accepted before signup can proceed
- rearrange and change text on signup page
2019-05-13 16:52:18 +02:00
mmd-osm
363155a2a8
Move xml gen. into view for (old) nodes, ways, relations, map
2019-05-07 22:16:22 +02:00
Tom Hughes
9f57f60b87
Fix new rubocop warnings
2019-04-23 09:33:34 +01:00
Frederik Ramm
17e6e69c39
Move generation of gpx_file XML from model to builder
2019-04-14 16:25:14 +01:00
Andy Allan
e66c719294
Resourceful(ish) naming for api/users_controller
2019-04-10 17:06:15 +02:00
Andy Allan
5444af981c
Resourceful route names for api/trace_controller
2019-04-10 16:52:20 +02:00
Tom Hughes
f68cee0f4e
Fix queuing of trace imports for API uploads
...
Fixes #2200
2019-04-03 21:53:16 +01:00
Tom Hughes
dbbbd62ef1
Merge remote-tracking branch 'upstream/pull/2192'
2019-03-27 18:19:08 +00:00
Andy Allan
7b057545c0
Disentangle the api abilities from the web abilities
...
This will allow us to rename api actions without causing permissions headaches. The choice of
abilities files is made by inheriting from either api_controller or application_controller.
Also rename capabilities to api_capabilites, for consistency.
2019-03-27 18:07:29 +01:00
Andy Allan
a5f4124681
Refactor notes#mine to simplify code
2019-03-27 18:04:44 +01:00
Tom Hughes
50091893d4
Merge remote-tracking branch 'upstream/pull/2189'
2019-03-27 12:07:11 +00:00
Andy Allan
d5d3975181
Use the trace jobs for creating and destroy traces via the API
2019-03-27 11:40:50 +01:00
Andy Allan
0e09252840
Check validity token in changesets controller
...
It makes no difference today, but prevents problems in future if
methods accepting post requests are added to this controller in future.
2019-03-27 11:24:31 +01:00
Tom Hughes
dcfe326f65
Merge remote-tracking branch 'upstream/pull/2175'
2019-03-26 19:14:04 +00:00
Tom Hughes
d6af4450d1
Prefer String#match? over butt ugly Regexp#match?
2019-03-26 19:12:18 +00:00
Tom Hughes
951564eed1
Merge remote-tracking branch 'upstream/pull/2186'
2019-03-23 12:01:05 +00:00
Tom Hughes
cba7945a5b
Use strings consistently for database/api/gpx status
2019-03-23 11:59:42 +00:00
Andy Allan
19c2f6d485
Move more api-only methods into api_controller
2019-03-20 15:08:36 +01:00
Andy Allan
8d207e7de0
Mark all methods in api_controller and application_controller as private
...
They aren't designed to be used as request endpoints, so there's no
need for them to be public.
2019-03-20 15:08:36 +01:00
Andy Allan
dad36f2fca
Use a lambda in order to pass parameters in before_actions
...
This avoid calling methods on a new instance of the controller, and
therefore allows these methods to be marked as private.
As a bonus, rubocop can now parse them and warn when they refer to
actions that don't exist in the controller.
2019-03-20 15:08:36 +01:00
Andy Allan
94d19ae567
Move the authorize method to api_controller
2019-03-20 14:39:17 +01:00
Andy Allan
742291a840
Simplify deny_access handling
...
Now that we have all api controllers inheriting from a common base,
it's easier to override the deny_access handler without having to
switch between both.
Fixes #2064
2019-03-20 14:39:17 +01:00
Andy Allan
3bb07e29ec
Refactor api controllers to inherit from a common ApiController
2019-03-20 14:16:15 +01:00
Tom Hughes
141df02e67
Move status into the settings object
...
Only the very early boot code needs to look at the value
from the environment directly.
2019-03-17 11:15:34 +00:00
Tom Hughes
6600221fe3
Fix database offline mode
2019-03-17 11:15:34 +00:00
Tom Hughes
e3ed9988ce
Merge remote-tracking branch 'upstream/pull/2177'
2019-03-16 15:39:03 +00:00
Andy Allan
656ed0af76
Move changeset builder views to the api namespace
2019-03-16 15:30:41 +00:00
Frederik Ramm
538bfed8a6
Move changeset XML generation to a view
2019-03-16 15:30:18 +00:00
Andy Allan
d102c9aaf4
Move all settings to settings.yml
...
We leave the STATUS setting alone, since it's required before rails
boots. The test-specific settings now live in config/settings/test.yml
2019-03-13 18:06:23 +01:00
Andy Allan
1ca77d6dda
Rubocop fixes for ruby 2.5
2019-03-13 10:33:33 +01:00
Tom Hughes
94b59f4403
Merge remote-tracking branch 'upstream/pull/2161'
2019-02-28 19:17:40 +00:00
Tom Hughes
73214da35d
Merge remote-tracking branch 'upstream/pull/2160'
2019-02-28 18:58:05 +00:00