Commit graph

1091 commits

Author SHA1 Message Date
Matt Amos
990f3eba40 Altered old_way stuff to be Railsy like old_node is now 2012-04-05 13:49:43 +01:00
Kai Krueger
72e59b49fa Copy the redaction code from nodes to ways 2012-04-05 13:49:39 +01:00
Kai Krueger
7d41b926cf Expose redactions through the node history API calls
Add the show_redactions=true parameter to the old_node_controller
and add a redacted attribute in node XML output.
2012-04-05 13:48:36 +01:00
Matt Amos
67182f824e Fixing review comments
Added scoping for unredacted items, cleaned up authorization and
railsified old_node_controller.
2012-04-05 13:46:40 +01:00
Matt Amos
67dd9e4c9d Adding first cut of Redactions support
Redactions support hiding historical versions of elements and
collecting meta-data about that action together.
2012-04-05 13:46:36 +01:00
Tom Hughes
d7d317f694 Mark yet more methods as needing write access to the database 2012-04-02 19:08:47 +01:00
Tom Hughes
151626d019 We no longer need to disable sessions when the database is offline 2012-04-02 18:42:14 +01:00
Tom Hughes
e1ce75ec49 Mark some extra methods as needing write access to the database 2012-04-02 18:40:05 +01:00
Tom Hughes
987c52f53e Only require a readable database for login, not a writable one 2012-03-28 10:08:38 +01:00
Tom Hughes
eaad3611b8 Add functional tests for messages
Also fixes various issues in the code discovered while writing
the tests, and adds some named routes for messages.
2012-03-22 23:14:29 +00:00
Tom Hughes
5270a07bc5 Handle change from @to_user to @this_user for new message action 2012-03-22 19:47:24 +00:00
Tom Hughes
311f7ddd6e Factor out common code for looking up users 2012-03-21 22:22:33 +00:00
Tom Hughes
a9824dbc2e Use one "no_such_user" view everywhere 2012-03-21 21:47:09 +00:00
Tom Hughes
38a610fd31 Add functional tests for the user_roles controller 2012-03-20 17:21:13 +00:00
Tom Hughes
5f33656c8d Get rid of custom CSRF protection for user role changes
By restricting role changes to POST requests, which they should be
anyway, we get all the rails CSRF protection for free.
2012-03-20 17:21:13 +00:00
Tom Hughes
e1d873cde9 Add functional tests for user blocks
Also fixes various issues in the code discovered while writing
the tests, and adds some named routes for user blocks.
2012-03-19 11:26:02 +00:00
Tom Hughes
64747f7604 Set the user description to markdown formatting when it changes 2012-03-17 16:37:22 +00:00
Tom Hughes
561f2f694a Add preview functionality to rich text controls 2012-03-17 16:36:57 +00:00
Tom Hughes
d29a9dad9d Removed code for handling Osmrender export requests 2012-03-15 14:43:03 +00:00
Tom Hughes
3a1e7a67ac Specify the username when redirecting to the OAuth client list 2012-03-14 13:57:28 +00:00
Tom Hughes
b255a333c5 Specify the username when generating a URL for a trace 2012-03-10 13:05:39 +00:00
Tom Hughes
a87540a5dd Fix layout selection to detect OAuth correctly 2012-03-10 12:46:10 +00:00
Tom Hughes
2351d02ed5 Fix mass assignment errors with user blocks 2012-03-09 23:15:39 +00:00
Tom Hughes
58d889436f Fix various routing and route generation errors 2012-03-09 23:15:39 +00:00
Tom Hughes
6391ea5a7a Remove method tests that are now enforced by the routes 2012-03-09 20:19:55 +00:00
Tom Hughes
b012617608 Save the user record after changing it 2012-03-09 00:21:08 +00:00
Tom Hughes
4dfe43c956 Fix typo 2012-03-08 23:17:38 +00:00
Tom Hughes
88541c523d Use normal assignment instead of mass assignment 2012-03-08 22:41:25 +00:00
Tom Hughes
1340fca8f1 Turn on mass assignment protection
Require any attribute that is going to be mass assigned to be
whitelisted, and whitelist those attributes which need it
2012-03-06 08:54:45 +00:00
Tom Hughes
232e04ab9b Use a consistent host name in cache keys 2012-03-04 10:27:34 +00:00
Tom Hughes
e7a0302e2b Update the username cookie when the display name is changed 2012-03-03 00:49:03 +00:00
Steve Singer
1944372af8 Add a view to show diary comments left by a user 2012-02-28 21:29:18 +00:00
Tom Hughes
7c3a4b497e Change session expiry to 28 days when "remember me" is set
The expiry is passed directly to memcache, which treats any value
over 30 days as an absolute time, so using 1 month leads to sessions
expiring as soon as they are created.
2012-02-27 09:01:48 +00:00
Tom Hughes
af13c42322 Refactor session persistence code 2012-02-26 21:44:17 +00:00
Tom Hughes
346b097d85 Fix bad database query for RSS feeds of trace file tags 2012-02-19 11:48:33 +00:00
Tom Hughes
8d52069b00 Avoid double render error 2012-02-19 11:04:59 +00:00
Tom Hughes
ac48c6a16f Explicitly disable the layout for actions which don't want it 2012-02-15 17:48:17 +00:00
Tom Hughes
e2b185133e ActionController::UnknownAction is now AbstractController::ActionNotFound 2012-02-15 17:48:16 +00:00
Tom Hughes
8afc736536 Revert "Log locale selection"
This reverts commit 101ee6ade2.
2012-02-14 15:47:21 +00:00
Tom Hughes
101ee6ade2 Log locale selection 2012-02-14 14:57:29 +00:00
Tom Hughes
2b326acc32 Allow the copyright page to be requested in any locale 2012-02-14 11:54:22 +00:00
Tom Hughes
a16b45eb6a Add convenience methods to make ACL use simpler 2012-02-08 22:38:02 +00:00
Tom Hughes
8eef66cee2 Don't check the ACL unless we're creating a new user 2012-02-08 22:35:13 +00:00
Tom Hughes
cd43529cc8 Add support for domain based ACLs 2012-02-08 21:40:21 +00:00
Tom Hughes
2c666b42d7 Fix exception when a suspended user tries to login 2012-01-23 14:31:06 +00:00
Tom Hughes
8ba74c581d Add an ACL check to allow trace downloads to be blocked 2012-01-17 17:43:32 +00:00
Tom Hughes
3369743d6c Revert "Increase the size of the diary RSS feed temporarily"
This reverts commit ccd7882bcf.
2012-01-16 17:50:23 +00:00
Tom Hughes
ccd7882bcf Increase the size of the diary RSS feed temporarily 2012-01-14 13:36:49 +00:00
Tom Hughes
f7df396cf2 Don't cache user specific diary entry lists 2012-01-07 15:43:27 +00:00
Tom Hughes
63cc3c195a Try really hard to find out if the real exception was a timeout
Helpfully rails manages to wrap the actual exception that occurred
in at least one, and sometimes two further levels of exception, one
of which does preserve the original exception except as text.
2012-01-07 15:03:25 +00:00