Matt Amos
990f3eba40
Altered old_way stuff to be Railsy like old_node is now
2012-04-05 13:49:43 +01:00
Kai Krueger
72e59b49fa
Copy the redaction code from nodes to ways
2012-04-05 13:49:39 +01:00
Kai Krueger
7d41b926cf
Expose redactions through the node history API calls
...
Add the show_redactions=true parameter to the old_node_controller
and add a redacted attribute in node XML output.
2012-04-05 13:48:36 +01:00
Matt Amos
67182f824e
Fixing review comments
...
Added scoping for unredacted items, cleaned up authorization and
railsified old_node_controller.
2012-04-05 13:46:40 +01:00
Matt Amos
67dd9e4c9d
Adding first cut of Redactions support
...
Redactions support hiding historical versions of elements and
collecting meta-data about that action together.
2012-04-05 13:46:36 +01:00
Tom Hughes
d7d317f694
Mark yet more methods as needing write access to the database
2012-04-02 19:08:47 +01:00
Tom Hughes
151626d019
We no longer need to disable sessions when the database is offline
2012-04-02 18:42:14 +01:00
Tom Hughes
e1ce75ec49
Mark some extra methods as needing write access to the database
2012-04-02 18:40:05 +01:00
Tom Hughes
987c52f53e
Only require a readable database for login, not a writable one
2012-03-28 10:08:38 +01:00
Tom Hughes
eaad3611b8
Add functional tests for messages
...
Also fixes various issues in the code discovered while writing
the tests, and adds some named routes for messages.
2012-03-22 23:14:29 +00:00
Tom Hughes
5270a07bc5
Handle change from @to_user to @this_user for new message action
2012-03-22 19:47:24 +00:00
Tom Hughes
311f7ddd6e
Factor out common code for looking up users
2012-03-21 22:22:33 +00:00
Tom Hughes
a9824dbc2e
Use one "no_such_user" view everywhere
2012-03-21 21:47:09 +00:00
Tom Hughes
38a610fd31
Add functional tests for the user_roles controller
2012-03-20 17:21:13 +00:00
Tom Hughes
5f33656c8d
Get rid of custom CSRF protection for user role changes
...
By restricting role changes to POST requests, which they should be
anyway, we get all the rails CSRF protection for free.
2012-03-20 17:21:13 +00:00
Tom Hughes
e1d873cde9
Add functional tests for user blocks
...
Also fixes various issues in the code discovered while writing
the tests, and adds some named routes for user blocks.
2012-03-19 11:26:02 +00:00
Tom Hughes
64747f7604
Set the user description to markdown formatting when it changes
2012-03-17 16:37:22 +00:00
Tom Hughes
561f2f694a
Add preview functionality to rich text controls
2012-03-17 16:36:57 +00:00
Tom Hughes
d29a9dad9d
Removed code for handling Osmrender export requests
2012-03-15 14:43:03 +00:00
Tom Hughes
3a1e7a67ac
Specify the username when redirecting to the OAuth client list
2012-03-14 13:57:28 +00:00
Tom Hughes
b255a333c5
Specify the username when generating a URL for a trace
2012-03-10 13:05:39 +00:00
Tom Hughes
a87540a5dd
Fix layout selection to detect OAuth correctly
2012-03-10 12:46:10 +00:00
Tom Hughes
2351d02ed5
Fix mass assignment errors with user blocks
2012-03-09 23:15:39 +00:00
Tom Hughes
58d889436f
Fix various routing and route generation errors
2012-03-09 23:15:39 +00:00
Tom Hughes
6391ea5a7a
Remove method tests that are now enforced by the routes
2012-03-09 20:19:55 +00:00
Tom Hughes
b012617608
Save the user record after changing it
2012-03-09 00:21:08 +00:00
Tom Hughes
4dfe43c956
Fix typo
2012-03-08 23:17:38 +00:00
Tom Hughes
88541c523d
Use normal assignment instead of mass assignment
2012-03-08 22:41:25 +00:00
Tom Hughes
1340fca8f1
Turn on mass assignment protection
...
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
2012-03-06 08:54:45 +00:00
Tom Hughes
232e04ab9b
Use a consistent host name in cache keys
2012-03-04 10:27:34 +00:00
Tom Hughes
e7a0302e2b
Update the username cookie when the display name is changed
2012-03-03 00:49:03 +00:00
Steve Singer
1944372af8
Add a view to show diary comments left by a user
2012-02-28 21:29:18 +00:00
Tom Hughes
7c3a4b497e
Change session expiry to 28 days when "remember me" is set
...
The expiry is passed directly to memcache, which treats any value
over 30 days as an absolute time, so using 1 month leads to sessions
expiring as soon as they are created.
2012-02-27 09:01:48 +00:00
Tom Hughes
af13c42322
Refactor session persistence code
2012-02-26 21:44:17 +00:00
Tom Hughes
346b097d85
Fix bad database query for RSS feeds of trace file tags
2012-02-19 11:48:33 +00:00
Tom Hughes
8d52069b00
Avoid double render error
2012-02-19 11:04:59 +00:00
Tom Hughes
ac48c6a16f
Explicitly disable the layout for actions which don't want it
2012-02-15 17:48:17 +00:00
Tom Hughes
e2b185133e
ActionController::UnknownAction is now AbstractController::ActionNotFound
2012-02-15 17:48:16 +00:00
Tom Hughes
8afc736536
Revert "Log locale selection"
...
This reverts commit 101ee6ade2
.
2012-02-14 15:47:21 +00:00
Tom Hughes
101ee6ade2
Log locale selection
2012-02-14 14:57:29 +00:00
Tom Hughes
2b326acc32
Allow the copyright page to be requested in any locale
2012-02-14 11:54:22 +00:00
Tom Hughes
a16b45eb6a
Add convenience methods to make ACL use simpler
2012-02-08 22:38:02 +00:00
Tom Hughes
8eef66cee2
Don't check the ACL unless we're creating a new user
2012-02-08 22:35:13 +00:00
Tom Hughes
cd43529cc8
Add support for domain based ACLs
2012-02-08 21:40:21 +00:00
Tom Hughes
2c666b42d7
Fix exception when a suspended user tries to login
2012-01-23 14:31:06 +00:00
Tom Hughes
8ba74c581d
Add an ACL check to allow trace downloads to be blocked
2012-01-17 17:43:32 +00:00
Tom Hughes
3369743d6c
Revert "Increase the size of the diary RSS feed temporarily"
...
This reverts commit ccd7882bcf
.
2012-01-16 17:50:23 +00:00
Tom Hughes
ccd7882bcf
Increase the size of the diary RSS feed temporarily
2012-01-14 13:36:49 +00:00
Tom Hughes
f7df396cf2
Don't cache user specific diary entry lists
2012-01-07 15:43:27 +00:00
Tom Hughes
63cc3c195a
Try really hard to find out if the real exception was a timeout
...
Helpfully rails manages to wrap the actual exception that occurred
in at least one, and sometimes two further levels of exception, one
of which does preserve the original exception except as text.
2012-01-07 15:03:25 +00:00