summaryrefslogtreecommitdiff
path: root/app/controllers/application_controller.rb
Commit message (Collapse)AuthorAgeFilesLines
* Add login and remember_me to devise permit listDmitriy Zaporozhets2014-01-141-1/+1
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Do not include subtomains in STS header.Marin Jankovski2014-01-031-1/+1
|
* HTTP headers protect against MIME-sniffing, force https if enabled.Marin Jankovski2013-12-301-0/+2
|
* Force IE use latest engine to render.xyb2013-12-271-0/+1
|
* Fix signup for rails4Dmitriy Zaporozhets2013-12-101-0/+6
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Added allow_blank to model validationsDmitriy Zaporozhets2013-12-101-0/+2
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Fix 404 on project page for unauthenticated userJason Hollingsworth2013-12-041-0/+3
| | | | | | | | Eliminate a 404 error when user is not logged in and attempts to visit a project page. The 404 page will still show up when user is logged in and the project doesn’t exist or the user doesn’t have access.
* Drop rjs from Issues#indexDmitriy Zaporozhets2013-11-291-0/+8
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Drop rjs from Infinite scrollingDmitriy Zaporozhets2013-11-281-0/+14
| | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
* Adding authenticated public mode (internal).Jason Hollingsworth2013-11-261-1/+1
| | | | | | Added visibility_level icons to project view (rather than just text). Added public projects to search results. Added ability to restrict visibility levels standard users can set.
* Fixing unsafe use of Thread.current variable :current_userAngus MacArthur2013-10-161-1/+6
|
* Remove .git from project url end redirectDmitriy Zaporozhets2013-10-141-0/+9
| | | | | | | | | | Ex. redirect from localhost/group/project.git to localhost/group/project It used to prevent 404 error when follow submodule http link like http://localhost/group/project.git
* Don't show users password change page if ldap usersIzaak Alpert2013-09-171-1/+1
|
* Add event filter for group and project show pagesDmitriy Zaporozhets2013-08-261-0/+5
|
* Fix accidentally removed class nameDmitriy Zaporozhets2013-08-211-0/+1
|
* Remove can_create_team code from userDmitriy Zaporozhets2013-08-211-5/+0
|
* Improve permissions on tags/branchesDmitriy Zaporozhets2013-07-171-0/+4
|
* Migrate global project taks. Removed more teams related functionalityDmitriy Zaporozhets2013-06-191-8/+0
|
* Force admin to change password after first sign-inDmitriy Zaporozhets2013-06-131-1/+1
|
* Add password_expires_at to users tableDmitriy Zaporozhets2013-06-131-2/+2
|
* Password expire: implement password resource inside profile. add ↵Dmitriy Zaporozhets2013-06-131-0/+7
| | | | before_fiter check
* cattr_accessor is not threadsafe!Dmitriy Zaporozhets2013-06-111-4/+3
|
* enforce secure gravatar urls when Gitlab.config.gitlab.https is setJean-Luc Geering2013-05-311-1/+1
|
* Grammar fix in error message for blocked login (in "application_controller.rb")Peter LeFanu Lumsdaine2013-05-281-2/+2
|
* Rename repo featureDmitriy Zaporozhets2013-05-251-1/+1
|
* Refactor API classes. So api classes like Gitlab::Issues become API::IssuesDmitriy Zaporozhets2013-05-141-1/+1
|
* Merge pull request #3801 from holdtotherod/feature/internally-public-projectsDmitriy Zaporozhets2013-05-031-1/+1
|\ | | | | Internally public projects
| * Internally public projectsStephen Lottermoser2013-05-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Public projects listed in the public section will be linked to the actual project's page. Public projects now give any user Guest permissions to the project, allowing them to download the code, read and create issues, and view anything else in the project's pages. Ample access tests have been added to the project_access_spec to verify correct permissions and behavior on public projects. - Visitors to the site who are not logged in still cannot view the project's pages. - Logged-in users visiting a public project where they are not a team member can create issues, but not snippets. They can view the projects code, issues, merge requests, etc, just as if they were a Guest member of the project. - Since this is a public project, the user is also granted :download_code permissions, a permission normally reserved for Reporters, since they can clone the repo anyways and browse commits and branches locally.
* | [BUGFIX] User suggest at team_members/new not working with relative_url_rootChristian Simon2013-04-241-0/+1
|/ | | | | * Closing #3540 * Closing #3704
* Finish select2-ajax for users. Added Select2Helper for testsDmitriy Zaporozhets2013-03-141-4/+3
|
* fix setting gon.api_tokenDmitriy Zaporozhets2013-03-131-2/+4
|
* add api users filter and integrate users select2Dmitriy Zaporozhets2013-03-131-0/+2
|
* User's blocked field refactored to use state machineAndrew8xx82013-03-041-2/+2
|
* Default issue tracker name added to gon variablesAndrew8xx82013-02-281-0/+5
|
* Make gitlab works with gitlab-shellDmitriy Zaporozhets2013-02-041-5/+0
|
* Dont allow gitlab be loaded in iframeDmitriy Zaporozhets2013-02-021-0/+5
|
* Fix mass-assignment. Dont allow users w/o access to create teamDmitriy Zaporozhets2013-01-251-0/+4
|
* update all teams code. refactoring and some correctionsAndrey Kumanyaev2013-01-241-0/+9
|
* REpostiry, Team modelsDmitriy Zaporozhets2013-01-031-0/+6
|
* Only owner can remove projectDmitriy Zaporozhets2012-12-051-0/+4
|
* Merge pull request #2059 from dolanor/feature-rewording-blocked-usersDmitriy Zaporozhets2012-11-301-2/+2
|\ | | | | Rewording for the account being blocked
| * Rewording for the account being blockedTanguy Herrmann2012-11-241-2/+2
| | | | | | | | | | | | When signing in with SSO, if the default behaviour of gitlab is to block SSO user, the only message the people will get is 'Your account was blocked' They should get the idea this might be only temporary and not because of a technical problem
* | Refactor abilities. Added ProjectUpdate context. Fixed few bugs with namespacesDmitriy Zaporozhets2012-11-291-3/+10
| |
* | add ability to change namespace from project edit pageDmitriy Zaporozhets2012-11-241-2/+1
| |
* | Deprecate code for Project. Use title and pathDmitriy Zaporozhets2012-11-231-1/+1
| |
* | Improve routing. Project access via namespaceDmitriy Zaporozhets2012-11-221-1/+4
|/
* Log caught exceptionsRiyad Preukschas2012-11-061-0/+9
|
* Separate observing of Note and MergeRequestsRobb Kidd2012-10-101-5/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | * Move is_assigned? and is_being_xx? methods to IssueCommonality This is behavior merge requests have in common with issues. Moved methods to IssueCommonality role. Put specs directly into merge_request_spec because setup differs for issues and MRs specifically in the "closed" factory to use. * Add MergeRequestObserver. Parallels IssueObserver in almost every way. Ripe for refactoring. * Rename MailerObserver to NoteObserver With merge request observing moved out of MailerObserver, all that was left was Note logic. Renamed to NoteObserver, added tests and updated application config for new observer names. Refactored NoteObserver to use the note's author and not rely on current_user. * Set current_user for MergeRequestObserver IssueObserver and MergeRequestObserver are the only observers that need a reference to the current_user that they cannot look up on the objects they are observing.
* Merge branch 'master' into simplify_controllers2Cyril2012-09-271-13/+1
|\ | | | | | | | | | | Conflicts: app/controllers/commits_controller.rb app/controllers/refs_controller.rb
| * Use Rails.root.join where appropriateRobert Speicher2012-09-261-1/+1
| |