Tom Hughes
8eef66cee2
Don't check the ACL unless we're creating a new user
2012-02-08 22:35:13 +00:00
Tom Hughes
cd43529cc8
Add support for domain based ACLs
2012-02-08 21:40:21 +00:00
Tom Hughes
2c666b42d7
Fix exception when a suspended user tries to login
2012-01-23 14:31:06 +00:00
Tom Hughes
8ba74c581d
Add an ACL check to allow trace downloads to be blocked
2012-01-17 17:43:32 +00:00
Tom Hughes
3369743d6c
Revert "Increase the size of the diary RSS feed temporarily"
...
This reverts commit ccd7882bcf
2012-01-16 17:50:23 +00:00
Tom Hughes
ccd7882bcf
Increase the size of the diary RSS feed temporarily
2012-01-14 13:36:49 +00:00
Tom Hughes
f7df396cf2
Don't cache user specific diary entry lists
2012-01-07 15:43:27 +00:00
Tom Hughes
63cc3c195a
Try really hard to find out if the real exception was a timeout
...
Helpfully rails manages to wrap the actual exception that occurred
in at least one, and sometimes two further levels of exception, one
of which does preserve the original exception except as text.
2012-01-07 15:03:25 +00:00
Tom Hughes
55dda7b184
Recognise wrapped timeout exceptions properly
2012-01-07 14:16:39 +00:00
Tom Hughes
c3f73a8028
No need to restrict friend's diary entries to public users
2012-01-07 11:54:07 +00:00
Mikel Maron
d878db0a9b
Add some more social features
...
Add a view showing changesets by nearby users, and views showing
diary entries by friends and nearby users.
2012-01-07 11:54:07 +00:00
Tom Hughes
3aa1c46aef
Use OSM::Timer (and hence SystemTimer) consistently
2012-01-06 09:13:52 +00:00
Tom Hughes
00a605a2a8
Use Timeout if SystemTimer isn't loaded
2012-01-06 09:11:23 +00:00
Tom Hughes
c182531149
Allow a special ODBL message to be displayed at login
2011-12-20 00:07:07 +00:00
Tom Hughes
99d901c2ec
Display the right title for friends' changesets
2011-12-16 08:29:19 +00:00
Tom Hughes
9545ca4ff3
Force a login to see your friends' changesets
2011-12-16 08:27:57 +00:00
Tom Hughes
8dd6f9f52f
Fix double render error
2011-12-16 08:25:59 +00:00
Tom Hughes
78db9e72bb
Convert friend changeset selection to use Arel queries
2011-12-15 21:47:43 +00:00
Tom Hughes
9d94d41376
Detabify
2011-12-15 21:26:51 +00:00
Mikel Maron
ce829bcc7c
Add support for viewing a list of your friends' changesets
2011-12-15 21:25:27 +00:00
Tom Hughes
7b01a8ae82
Look up email addresses case insensitively for password resets
...
If the email address entered is not found then try a case insensitive
lookup, and if that finds a single result then use it.
2011-12-13 17:42:42 +00:00
Tom Hughes
2fc9c8c05b
Cope with no openid_url being supplied
2011-12-13 10:26:30 +00:00
Tom Hughes
49038a44d9
Validate email addresses before confirming them
2011-12-13 09:49:13 +00:00
Tom Hughes
ebf597971f
Removed bogus attempt to look up the previous version
...
This lookup wasn't actually doing what the comment said it was doing
and I don't see any reason to output the previous details of the object
for a delete action.
2011-12-10 16:24:57 +00:00
Tom Hughes
bc07bf484b
Make search work again
2011-11-27 17:40:23 +00:00
Tom Hughes
13289d4041
Switch from Prototype to jQuery
2011-11-26 00:22:31 +00:00
Tom Hughes
7e66fcbb1b
Log any session that is reset due to a username mismatch
2011-11-24 09:42:04 +00:00
Tom Hughes
db616d347a
Add feed action to relevant filters
2011-11-22 12:19:41 +00:00
Tom Hughes
7c621a6a04
Add the OAuth verifier to 1.0a callbacks correctly
2011-11-19 17:11:54 +00:00
Tom Hughes
be8164cf15
Generate correct URLs for changeset feeds
2011-11-19 12:42:37 +00:00
Tom Hughes
093651c208
Override oauth1_authorize pending a fixed version of oauth-plugin
2011-11-19 00:25:17 +00:00
Tom Hughes
a6b64fdebd
Pass sql_for_area a BoundingBox object
2011-11-18 16:50:54 +00:00
Tom Hughes
7b89dc6349
Make OAuth work again
2011-11-16 21:13:25 +00:00
Tom Hughes
7c25a1e1bc
Make the username cookie permanent
2011-11-16 10:05:39 +00:00
Tom Hughes
cbd687d0b1
Explicitly select the default locale if we have no better ideas
2011-11-16 09:21:23 +00:00
Tom Hughes
4408416b62
Add some logging to help diagnose changeset feed locale issue
2011-11-16 08:56:35 +00:00
Tom Hughes
9e2132b83d
Don't reset the session when the token refers to an invalid user
...
During account creation it is quite normal for the token in the
session to refer to a user that is not active yet.
2011-11-14 09:42:59 +00:00
Tom Hughes
5bc3054d61
Store the username in a cookie and use it to validate the session
2011-11-14 09:42:59 +00:00
Tom Hughes
88bf67b092
Make /user/new handle already logged in users better
2011-11-14 09:42:58 +00:00
Tom Hughes
c485ae3249
Fix object_id warning
2011-11-14 09:42:58 +00:00
Tom Hughes
9c28a626cb
Stop the API changeset query accepting min_lon etc
2011-11-14 09:42:57 +00:00
Peter Gray
95d899786a
Refactor bounding box code
...
Moved duplicated code into the BoundingBox class, and pass around
BoundingBox objects instead of lists of bounds.
2011-11-14 09:42:57 +00:00
Tom Hughes
07b834785f
Force openid callbacks to use GET to avoid CSRF validation issues
2011-11-14 09:42:57 +00:00
Tom Hughes
546db82281
Preserve field values if the signup form fails validation
2011-11-14 09:42:56 +00:00
Tom Hughes
2c837d896d
Make database offline mode work
2011-11-14 09:42:56 +00:00
Tom Hughes
96c22b169a
Get OAuth working, including a hack for Potlatch
2011-11-14 09:42:55 +00:00
Tom Hughes
071c3581e9
Disable CSRF token verification for API methods
2011-11-14 09:42:55 +00:00
Tom Hughes
d6c3fe5759
Refactor AMF respone streaming
...
Using a Proc object for the response body is deprecated, so switch
to using an object with an each method that yields each response.
2011-11-14 09:42:53 +00:00
Tom Hughes
97b1290f1a
Use SecureRandom instead of the deprecated ActiveSupport::SecureRandom
2011-11-14 09:42:52 +00:00
Tom Hughes
fc25c3d412
Rename all ID columns that aren't unique
...
Having a table with a column called ID that is only part of the
primary key really doesn't work as rails likes to treat ID as a
special name so it becomes impossible to assign to it or read it.
2011-11-14 09:42:52 +00:00
