- 24 6月, 2016 1 次提交
-
-
由 Rémy Coutable 提交于
The issue was with the `User#groups` and `User#projects` associations which goes through the `User#group_members` and `User#project_members`. Initially I chose to use a secure approach by storing the requester's user ID in `Member#created_by_id` instead of `Member#user_id` because I was aware that there was a security risk since I didn't know the codebase well enough. Then during the review, we decided to change that and directly store the requester's user ID into `Member#user_id` (for the sake of simplifying the code I believe), meaning that every `group_members` / `project_members` association would include the requesters by default... My bad for not checking that all the `group_members` / `project_members` associations and the ones that go through them (e.g. `Group#users` and `Project#users`) were made safe with the `where(requested_at: nil)` / `where(members: { requested_at: nil })` scopes. Now they are all secure. Signed-off-by: NRémy Coutable <remy@rymai.me>
-
- 20 6月, 2016 4 次提交
-
-
由 Rémy Coutable 提交于
Also, reuse partials from the non-admin views. Signed-off-by: NRémy Coutable <remy@rymai.me>
-
由 Dmitriy Zaporozhets 提交于
Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
-
由 Dmitriy Zaporozhets 提交于
Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
-
由 Dmitriy Zaporozhets 提交于
Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
-
- 17 6月, 2016 2 次提交
-
-
由 Lin Jen-Shin 提交于
-
由 Dmitriy Zaporozhets 提交于
Signed-off-by: NDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
-
- 16 6月, 2016 2 次提交
-
-
由 James Lopez 提交于
This reverts commit 13e37a3e.
-
由 James Lopez 提交于
-
- 15 6月, 2016 5 次提交
-
-
由 Annabel Dunstone 提交于
-
由 Annabel Dunstone 提交于
-
由 Annabel Dunstone 提交于
-
由 Annabel Dunstone 提交于
-
由 Annabel Dunstone 提交于
-
- 14 6月, 2016 1 次提交
-
-
由 Rémy Coutable 提交于
Signed-off-by: NRémy Coutable <remy@rymai.me>
-
- 09 6月, 2016 1 次提交
-
-
由 Sean McGivern 提交于
Add a new application setting, after_sign_up_text. This is text to be rendered as Markdown and shown on the 'almost there' page after a user signs up, but before they've confirmed their account. Tweak the styles for that page so that centered lists look reasonable.
-
- 06 6月, 2016 1 次提交
-
-
由 Kamil Trzcinski 提交于
-
- 03 6月, 2016 2 次提交
-
-
由 James Lopez 提交于
This reverts commit 3e991230.
-
由 James Lopez 提交于
# Conflicts: # app/models/project.rb
-
- 31 5月, 2016 1 次提交
-
-
由 Kamil Trzcinski 提交于
-
- 26 5月, 2016 1 次提交
-
-
由 Yorick Peterse 提交于
This ensures all these calls have an author set, allowing the use of "all" mentions where possible.
-
- 25 5月, 2016 1 次提交
-
-
由 Annabel Dunstone 提交于
-
- 20 5月, 2016 1 次提交
-
-
由 Grzegorz Bizon 提交于
-
- 17 5月, 2016 3 次提交
-
-
由 Felipe Artur 提交于
-
由 Felipe Artur 提交于
-
由 Felipe Artur 提交于
-
- 13 5月, 2016 3 次提交
-
-
由 Drew Blessing 提交于
-
由 Takuya Noguchi 提交于
-
由 DJ Mountney 提交于
and drop exception handling around HealthCheck::Utils.process_checks, it wasn't needed
-
- 12 5月, 2016 11 次提交
-
-
由 Andrei Gliga 提交于
-
由 Andrei Gliga 提交于
This reverts commit 075ace5686c63d40f7e9fa02bf37e1bd3168f7e7.
-
由 Andrei Gliga 提交于
This reverts commit 78a832d0fd7ff445c707809134dbb2a42d2a9e03. Show help only for the enabled OAuth Providers on oauth-providers-help block aria: { describedby: help_block_id } instead of 'aria-describedby' => help_block_id provider and not p a more simple approach to the OmniAuth helper links for oauth-providers-help
-
由 Andrei Gliga 提交于
-
由 Andrei Gliga 提交于
-
由 Andrei Gliga 提交于
On Application Settings Page let the user select the enabled OAuth Sign in sources instead of the disabled ones
-
由 Andrei Gliga 提交于
-
由 Andrei Gliga 提交于
-
由 Andrei Gliga 提交于
if omniauth is enabled and if there are button_based_providers available show the disable OAuth sources
-
由 Andrei Gliga 提交于
-
由 Andrei Gliga 提交于
-