Commit Graph

145 Commits

Author SHA1 Message Date
Marius Balteanu
e67680a694 Mark sensitive user forms with Cache-Control: no-store (#42998).
Patch by Holger Just (user:hjust).

git-svn-id: https://svn.redmine.org/redmine/trunk@23942 e93f8b46-1217-0410-a6f0-8f06a7374b81
2025-09-07 06:15:43 +00:00
Marius Balteanu
6322650728 Add bulk unlock to user list context menu (#40913).
git-svn-id: https://svn.redmine.org/redmine/trunk@22925 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-07-13 10:21:49 +00:00
Marius Balteanu
193ca9faee Add bulk lock feature to user list context menu (#40913).
Patch by Mizuki ISHIKAWA (@ishikawa999).


git-svn-id: https://svn.redmine.org/redmine/trunk@22898 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-06-25 19:03:36 +00:00
Go MAEDA
b803bddb1f Fix "ArgumentError: Invalid response name: unprocessable_entity" with Rack 3.1.0+ in assert_response (#39889).
Rack 3.1.0 changed the symbol for HTTP status code 422 from `:unprocessable_entity` to `:unprocessable_content`.
Due to the change, `assert_response(:unprocessable_entity, ...)` raises ArgumentError with Rack 3.1.0+.

This fix is a follow-up to r22837.


git-svn-id: https://svn.redmine.org/redmine/trunk@22876 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-06-12 16:09:37 +00:00
Marius Balteanu
38d950df55 Remove current year from source file copyright headers and update year in footer to 2024 (#40043).
git-svn-id: https://svn.redmine.org/redmine/trunk@22746 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-02-26 22:55:54 +00:00
Marius Balteanu
5676499ceb Remove deprecated @status=@ param used to get all users. @status=*@ should be used now. (#40124).
git-svn-id: https://svn.redmine.org/redmine/trunk@22635 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-01-25 15:38:39 +00:00
Marius Balteanu
7ad46f7e04 Adds deprecation warning when an empty status param (status=) is used to get all users from API (#40099).
git-svn-id: https://svn.redmine.org/redmine/trunk@22633 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-01-25 15:31:49 +00:00
Marius Balteanu
f803778cde Restores API compatibility to legacy status when status param is sent blank (@status=@) and it should return all users (#40099).
git-svn-id: https://svn.redmine.org/redmine/trunk@22625 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-01-25 05:10:51 +00:00
Go MAEDA
63391766a9 Remove unnecessary use of instance variables in CSV and Atom response handlers (#32985).
Contributed by Ko Nagase (@sanak).


git-svn-id: https://svn.redmine.org/redmine/trunk@22622 e93f8b46-1217-0410-a6f0-8f06a7374b81
2024-01-24 02:49:38 +00:00
Go MAEDA
54f4b1b0d8 Fix comment to correctly represent legacy filter parameters handling in UsersController#index API requests (#39181).
Patch by Mischa The Evil.


git-svn-id: https://svn.redmine.org/redmine/trunk@22354 e93f8b46-1217-0410-a6f0-8f06a7374b81
2023-10-17 09:27:31 +00:00
Go MAEDA
ff93ee3cfa API compatibility to legacy status and name query params (#39181, #37674)
- adds 'name' filter that mimics the old behavior of matching on email, login, first- or lastname
- maps the 'status' url parameter to the status_id filter, and the 'name' url parameter to the new name filter

Patch by Jens Krämer.


git-svn-id: https://svn.redmine.org/redmine/trunk@22343 e93f8b46-1217-0410-a6f0-8f06a7374b81
2023-10-15 01:42:07 +00:00
Go MAEDA
4dc56cd943 Exporting UserQuery does not use the query name as file name (#37674, #38182).
Patch by Takenori TAKAKI.


git-svn-id: https://svn.redmine.org/redmine/trunk@22121 e93f8b46-1217-0410-a6f0-8f06a7374b81
2023-03-01 08:47:28 +00:00
Go MAEDA
92bd67c279 Update copyright year to 2023 (#38141).
git-svn-id: https://svn.redmine.org/redmine/trunk@22013 e93f8b46-1217-0410-a6f0-8f06a7374b81
2023-01-01 06:19:35 +00:00
Go MAEDA
eb9bd3e836 Confirm user update / deletion (#37674).
Patch by Jens Krämer.


git-svn-id: https://svn.redmine.org/redmine/trunk@21825 e93f8b46-1217-0410-a6f0-8f06a7374b81
2022-09-20 03:37:26 +00:00
Go MAEDA
62f7551d57 User bulk destroy (#37674).
includes a confirmation page that also gives the opportunity to lock
users instead of deleting them.

Patch by Jens Krämer.


git-svn-id: https://svn.redmine.org/redmine/trunk@21824 e93f8b46-1217-0410-a6f0-8f06a7374b81
2022-09-20 03:36:40 +00:00
Go MAEDA
cd70187c2f Introduces a UserQuery model for admin/users (#37674).
Patch by Jens Krämer.


git-svn-id: https://svn.redmine.org/redmine/trunk@21823 e93f8b46-1217-0410-a6f0-8f06a7374b81
2022-09-20 03:16:05 +00:00
Marius Balteanu
a5cd3f791c Add "Two-factor authentication" filter and column to Users list in administration (#35934).
git-svn-id: http://svn.redmine.org/redmine/trunk@21380 e93f8b46-1217-0410-a6f0-8f06a7374b81
2022-01-22 08:53:41 +00:00
Go MAEDA
3686b77eb6 Update copyright year in source files to 2022 (#36379).
git-svn-id: http://svn.redmine.org/redmine/trunk@21342 e93f8b46-1217-0410-a6f0-8f06a7374b81
2022-01-02 05:29:10 +00:00
Go MAEDA
a8a87ef47e Security notification is not sent when an admin changes the password of a user (#32199).
Patch by Yuichi HARADA.


git-svn-id: http://svn.redmine.org/redmine/trunk@21006 e93f8b46-1217-0410-a6f0-8f06a7374b81
2021-05-24 06:28:23 +00:00
Go MAEDA
3e36b5c452 Update copyright year in source files to 2021 (#33069).
git-svn-id: http://svn.redmine.org/redmine/trunk@20846 e93f8b46-1217-0410-a6f0-8f06a7374b81
2021-03-25 06:58:56 +00:00
Go MAEDA
5063d3faf0 Fix that users can delete their own accounts unconditionally via REST API (#11870).
Patch by Mizuki ISHIKAWA and Kevin Fischer.


git-svn-id: http://svn.redmine.org/redmine/trunk@20782 e93f8b46-1217-0410-a6f0-8f06a7374b81
2021-03-13 07:20:57 +00:00
Toshi MARUYAMA
783ade73d7 use 'lambda' instead of '->{}' at UsersController
git-svn-id: http://svn.redmine.org/redmine/trunk@20657 e93f8b46-1217-0410-a6f0-8f06a7374b81
2020-12-17 13:10:13 +00:00
Go MAEDA
086c95569e Require explicit confirmation before deleting a user (#34417).
Patch by Jens Krämer.


git-svn-id: http://svn.redmine.org/redmine/trunk@20600 e93f8b46-1217-0410-a6f0-8f06a7374b81
2020-12-10 00:57:38 +00:00
Toshi MARUYAMA
ee22339c61 shorten long line of UsersController
git-svn-id: http://svn.redmine.org/redmine/trunk@20597 e93f8b46-1217-0410-a6f0-8f06a7374b81
2020-12-09 14:12:31 +00:00
Toshi MARUYAMA
f6cfc68121 remove spaces inside {} of UsersController
git-svn-id: http://svn.redmine.org/redmine/trunk@20393 e93f8b46-1217-0410-a6f0-8f06a7374b81
2020-11-16 12:22:02 +00:00
Toshi MARUYAMA
939f59a30f use "do end" instead of {} at UsersController
git-svn-id: http://svn.redmine.org/redmine/trunk@20302 e93f8b46-1217-0410-a6f0-8f06a7374b81
2020-11-08 13:02:26 +00:00
Go MAEDA
907e0173e4 Update copyright year in source files to 2020 (#33069).
git-svn-id: http://svn.redmine.org/redmine/trunk@19553 e93f8b46-1217-0410-a6f0-8f06a7374b81
2020-03-03 00:24:10 +00:00
Go MAEDA
4082069c75 Update copyright year.
git-svn-id: http://svn.redmine.org/redmine/trunk@18198 e93f8b46-1217-0410-a6f0-8f06a7374b81
2019-05-25 07:36:06 +00:00
Go MAEDA
07b3087fda Enable frozen_string_literal for some files under app and lib directory (#26561).
git-svn-id: http://svn.redmine.org/redmine/trunk@17977 e93f8b46-1217-0410-a6f0-8f06a7374b81
2019-03-16 09:37:35 +00:00
Go MAEDA
5861160ffc Add "frozen_string_literal: false" for all files (#26561).
This will be changed to true in the future.


git-svn-id: http://svn.redmine.org/redmine/trunk@17947 e93f8b46-1217-0410-a6f0-8f06a7374b81
2019-03-15 01:32:57 +00:00
Go MAEDA
fe7e3e7df5 Add issue tracking table on the user profile page (#30421).
Patch by Go MAEDA.


git-svn-id: http://svn.redmine.org/redmine/trunk@17844 e93f8b46-1217-0410-a6f0-8f06a7374b81
2019-02-01 23:46:05 +00:00
Jean-Philippe Lang
0c78056a69 Send emails asynchronously (#26791).
Custom async_* delivery methods are removed in favor of ActiveJob (Async by default).

git-svn-id: http://svn.redmine.org/redmine/trunk@17588 e93f8b46-1217-0410-a6f0-8f06a7374b81
2018-10-10 17:13:09 +00:00
Go MAEDA
83939be2b5 Export users list to CSV (#5957).
Contriubted by Mizuki ISHIKAWA and Yuki Kita.


git-svn-id: http://svn.redmine.org/redmine/trunk@17463 e93f8b46-1217-0410-a6f0-8f06a7374b81
2018-08-05 12:30:40 +00:00
Go MAEDA
f46b95107d Render activities block on UsersController#show grouped and with event_type icon (#27240).
Patch by Mischa The Evil.


git-svn-id: http://svn.redmine.org/redmine/trunk@17128 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-12-25 04:38:07 +00:00
Jean-Philippe Lang
d74f0bfd5c Merged rails-5.1 branch (#23630).
git-svn-id: http://svn.redmine.org/redmine/trunk@16859 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-07-23 11:26:04 +00:00
Jean-Philippe Lang
7fd04e1f8d Update copyright.
git-svn-id: http://svn.redmine.org/redmine/trunk@16685 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-06-25 08:40:31 +00:00
Jean-Philippe Lang
3e787f7e7d Deny edit/update/delete for anonymous user (#25483).
Patch by Holger Just.

git-svn-id: http://svn.redmine.org/redmine/trunk@16464 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-04-03 12:59:55 +00:00
Jean-Philippe Lang
9441ab0ca8 Send email even if password is not changed (#7577).
git-svn-id: http://svn.redmine.org/redmine/trunk@16453 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-04-03 10:48:59 +00:00
Jean-Philippe Lang
3deb70d4aa Don't preload projects and roles on Principal#memberships association (#23519).
Patch by Ondřej Ezr.

git-svn-id: http://svn.redmine.org/redmine/trunk@16153 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-01-07 11:40:09 +00:00
Jean-Philippe Lang
62b64f4834 Wrong activity timezone on user page (#14658).
Patch by Go MAEDA.

git-svn-id: http://svn.redmine.org/redmine/trunk@16138 e93f8b46-1217-0410-a6f0-8f06a7374b81
2017-01-04 21:21:15 +00:00
Jean-Philippe Lang
124a459d55 Use the main menu for project related actions that support cross-project display.
git-svn-id: http://svn.redmine.org/redmine/trunk@15983 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-11-19 10:30:02 +00:00
Jean-Philippe Lang
fcec4d0975 Set preferences with #safe_attributes=.
git-svn-id: http://svn.redmine.org/redmine/trunk@15728 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-07-21 17:56:26 +00:00
Jean-Philippe Lang
43d8ab8288 Use safe_attributes for user preferences.
git-svn-id: http://svn.redmine.org/redmine/trunk@15688 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-07-17 06:43:12 +00:00
Jean-Philippe Lang
c55dd52b07 Handle admin and login with safe_attributes.
git-svn-id: http://svn.redmine.org/redmine/trunk@15663 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-07-14 11:56:39 +00:00
Jean-Philippe Lang
ee82a55602 Use .before_action instead of .before_filter.
git-svn-id: http://svn.redmine.org/redmine/trunk@15655 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-07-14 07:27:31 +00:00
Jean-Philippe Lang
66b9add002 Don't show non member and anonymous groups in filter.
git-svn-id: http://svn.redmine.org/redmine/trunk@15348 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-04-23 09:10:55 +00:00
Jean-Philippe Lang
cda9c63d9c Updates copyright for 2016.
git-svn-id: http://svn.redmine.org/redmine/trunk@15238 e93f8b46-1217-0410-a6f0-8f06a7374b81
2016-03-13 10:30:10 +00:00
Jean-Philippe Lang
389527296e Prevent admins from sending themselves their own password (#21436).
Patch by Jan Schulz-Hofen.

git-svn-id: http://svn.redmine.org/redmine/trunk@14966 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-12-06 20:46:26 +00:00
Jean-Philippe Lang
d6f389658b Require password re-entry for sensitive actions (#19851).
Patch by Jens Krämer.

git-svn-id: http://svn.redmine.org/redmine/trunk@14333 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-06-19 18:41:10 +00:00
Jean-Philippe Lang
c0c05ec41e Don't let users be sorted by email (#19161).
git-svn-id: http://svn.redmine.org/redmine/trunk@14140 e93f8b46-1217-0410-a6f0-8f06a7374b81
2015-03-20 09:58:32 +00:00