Eric Davis ea0bc56a65 Protect controllers from potential CSRF attacks. #4216 ...

git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3051 e93f8b46-1217-0410-a6f0-8f06a7374b81

2009-11-14 19:41:07 +00:00

..

account_controller.rb

AccountController#show (/account/show/:id) moved to UsersController#show (/users/:id).

2009-10-29 18:37:00 +00:00

admin_controller.rb

Merged nested projects branch. Removes limit on subproject nesting (#594).

2009-01-24 11:31:15 +00:00

application_controller.rb

Protect controllers from potential CSRF attacks. #4216

2009-11-14 19:41:07 +00:00

attachments_controller.rb

Returns a 404 error when trying to view/download an attachment that can't be read from disk.

2009-04-25 09:31:36 +00:00

auth_sources_controller.rb

Moves @layout 'base'@ to ApplicationController.

2008-08-10 15:22:54 +00:00

boards_controller.rb

Contextual quick search (#3263).

2009-10-21 17:07:18 +00:00

custom_fields_controller.rb

Added several more plugin hooks:

2009-03-21 00:22:59 +00:00

documents_controller.rb

Contextual quick search (#3263).

2009-10-21 17:07:18 +00:00

enumerations_controller.rb

Enumerations can now have custom fields defined on them. #4077

2009-10-21 22:34:22 +00:00

groups_controller.rb

User groups branch merged.

2009-09-12 08:36:46 +00:00

issue_categories_controller.rb

Moves @layout 'base'@ to ApplicationController.

2008-08-10 15:22:54 +00:00

issue_relations_controller.rb

Fixed: users should not be able to add relations with issues they're not allowed to view (#2589).

2009-01-27 19:33:03 +00:00

issue_statuses_controller.rb

Reorder links refactoring (follows r2526).

2009-03-01 12:03:48 +00:00

issues_controller.rb

Redirect to the current page when using context menu on the issue list (#4184).

2009-11-11 11:35:27 +00:00

journals_controller.rb

Added plugin hooks around Journal editing

2008-12-10 23:44:22 +00:00

mail_handler_controller.rb

Adds a simple API and a standalone script that can be used to forward emails from a local or remote email server to Redmine (#1110).

2008-06-25 19:25:28 +00:00

members_controller.rb

User groups branch merged.

2009-09-12 08:36:46 +00:00

messages_controller.rb

Fixed that "RE:" prefix is added to the subject each time the message is quoted (#4215).

2009-11-13 19:14:18 +00:00

my_controller.rb

Set a default scope for 'My page' block names translations (#3057).

2009-04-05 13:33:54 +00:00

news_controller.rb

Contextual quick search (#3263).

2009-10-21 17:07:18 +00:00

projects_controller.rb

Fixed a test failure.

2009-10-29 18:51:10 +00:00

queries_controller.rb

Allows multiple roles on the same project (#706). Prerequisite for user groups feature.

2009-05-10 10:54:31 +00:00

reports_controller.rb

Changed Enumerations to use a Single Table Inheritance

2009-05-30 23:30:36 +00:00

repositories_controller.rb

Contextual quick search (#3263).

2009-10-21 17:07:18 +00:00

roles_controller.rb

Allows multiple roles on the same project (#706). Prerequisite for user groups feature.

2009-05-10 10:54:31 +00:00

search_controller.rb

Add view_issues permission (#3187).

2009-11-14 12:08:47 +00:00

settings_controller.rb

Adds email notification on wiki changes (#413). It's disabled by default and can be enabled in application settings.

2009-05-17 09:55:13 +00:00

sys_controller.rb

Replaces the repositories management SOAP API with a simple REST API.

2009-02-10 22:03:25 +00:00

timelog_controller.rb

Fixed: Pre-filled time tracking date ignores timezone (#4160).

2009-11-06 19:41:03 +00:00

trackers_controller.rb

Trackers controller refactoring.

2009-02-26 09:21:41 +00:00

users_controller.rb

Unified UsersController#list and #index.

2009-10-29 18:48:19 +00:00

versions_controller.rb

Adds a link to automatically close completed versions in project settings (#1245).

2009-11-09 18:53:12 +00:00

watchers_controller.rb

Add a permission to remove issue watchers (#2450).

2009-10-25 12:11:53 +00:00

welcome_controller.rb

Renamed Project#public named_scope so it will not override Ruby's public method

2009-10-21 03:21:31 +00:00

wiki_controller.rb

Contextual quick search (#3263).

2009-10-21 17:07:18 +00:00

wikis_controller.rb

Moves @layout 'base'@ to ApplicationController.

2008-08-10 15:22:54 +00:00

workflows_controller.rb

Adds a workflow overview screen.

2008-09-28 12:03:17 +00:00