Dmitriy Zaporozhets
fae2e540b6
Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq into upstream-ce-6-8
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
Conflicts:
CHANGELOG
Gemfile.lock
README.md
VERSION
app/assets/javascripts/application.js
db/schema.rb
doc/install/installation.md
doc/update/4.2-to-5.0.md
doc/update/5.0-to-5.1.md
doc/update/5.1-to-5.2.md
doc/update/5.2-to-5.3.md
doc/update/5.4-to-6.0.md
doc/update/6.0-to-6.1.md
doc/update/6.0-to-6.7.md
lib/gitlab/git_access.rb
2014-04-10 13:34:56 +03:00
Dmitriy Zaporozhets
84d17f7965
Skip require email for devise controllers
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-04-07 14:32:59 +03:00
Dmitriy Zaporozhets
a73df4f72d
Allow oauth signup without email
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-04-07 14:09:29 +03:00
Dmitriy Zaporozhets
e502d785f9
Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq into code-from-ce-6-7
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
Conflicts:
CHANGELOG
VERSION
app/controllers/application_controller.rb
app/models/user.rb
app/views/groups/members.html.haml
app/views/groups/show.html.haml
config/gitlab.yml.example
db/schema.rb
features/steps/project/project_browse_branches.rb
lib/api/projects.rb
lib/gitlab/ldap/access.rb
lib/gitlab/ldap/adapter.rb
lib/gitlab/ldap/person.rb
lib/gitlab/upgrader.rb
2014-03-18 11:15:01 +02:00
Jacob Vosmaer
826404a80b
Open/close LDAP in ApplicationController
...
By opening the LDAP connection at the controller level we can reuse it
for all LDAP queries during the request.
Conflicts:
CHANGELOG
app/controllers/application_controller.rb
2014-03-14 11:03:55 +01:00
Jacob Vosmaer
48e9054056
Open/close LDAP in ApplicationController
...
By opening the LDAP connection at the controller level we can reuse it
for all LDAP queries during the request.
2014-03-14 09:03:49 +01:00
Dmitriy Zaporozhets
c6d39a14d6
Add User#requires_ldap_check? method
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-11 10:24:07 +02:00
Dmitriy Zaporozhets
e57e1e04e3
Remove non-exist method from ldap security check
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-11 09:15:04 +02:00
Dmitriy Zaporozhets
b1ff8e31b1
Add ldap check in application_controller and internal api
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-03-10 17:10:23 +02:00
Dmitriy Zaporozhets
a9280de11f
Better redirect for edit blod from MergeRequest
...
If you cancel edit you will be redirected back to merge request
If you submit changes you will be redirected back to merge request
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-02-26 14:06:31 +02:00
Dmitriy Zaporozhets
2171bbcd6e
Update rack profiler
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-02-25 17:41:56 +02:00
Dmitriy Zaporozhets
cf413ffb75
Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq into ce_6_6
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
Conflicts:
LICENSE
VERSION
db/schema.rb
features/steps/group/group.rb
lib/api/internal.rb
2014-02-19 14:55:07 +02:00
Ciro Santillli
439a61783d
User can leave group from group page.
2014-02-12 15:52:53 +01:00
Dmitriy Zaporozhets
348e44ef06
Dont use avatars for user select if avatar is disabled
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-02-11 15:49:39 +02:00
Dmitriy Zaporozhets
2df9a76042
Merge branch 'master' of dev.gitlab.org:gitlab/gitlabhq into 6_5_ce
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
Conflicts:
CHANGELOG
VERSION
app/assets/stylesheets/generic/common.scss
app/views/projects/edit.html.haml
config.ru
db/schema.rb
doc/install/installation.md
doc/update/6.0-to-6.1.md
doc/update/6.1-to-6.2.md
lib/gitlab/upgrader.rb
2014-01-21 18:15:49 +02:00
Dmitriy Zaporozhets
0c637acb69
Add login and remember_me to devise permit list
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2014-01-14 20:28:41 +02:00
Marin Jankovski
8a0bfa4998
Do not include subtomains in STS header.
2014-01-03 16:02:57 +01:00
Marin Jankovski
94c96cd445
HTTP headers protect against MIME-sniffing, force https if enabled.
2013-12-30 09:41:05 +01:00
xyb
498ec08da3
Force IE use latest engine to render.
2013-12-27 19:38:29 +08:00
Dmitriy Zaporozhets
1f43fa20d3
Merge branch '6-4-stable' of dev.gitlab.org:gitlab/gitlabhq into 6-4-from-ce
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
Conflicts:
Gemfile
Gemfile.lock
VERSION
app/controllers/application_controller.rb
db/schema.rb
doc/install/installation.md
doc/update/6.2-to-6.3.md
2013-12-23 12:57:22 +02:00
Dmitriy Zaporozhets
f088c867a4
Fix signup for rails4
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-12-10 13:35:10 +02:00
Dmitriy Zaporozhets
b3c1d0d8df
Added allow_blank to model validations
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-12-10 12:11:27 +02:00
Jason Hollingsworth
c099074fcc
Fix 404 on project page for unauthenticated user
...
Eliminate a 404 error when user is not logged in and attempts to visit
a project page.
The 404 page will still show up when user is logged in and the project
doesn’t exist or the user doesn’t have access.
2013-12-04 13:10:20 -06:00
Dmitriy Zaporozhets
da10cad1da
Drop rjs from Issues#index
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-11-29 15:05:32 +02:00
Dmitriy Zaporozhets
33aea41708
Drop rjs from Infinite scrolling
...
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com >
2013-11-28 11:38:20 +02:00
Jason Hollingsworth
d9bb4230cc
Adding authenticated public mode (internal).
...
Added visibility_level icons to project view (rather than just text).
Added public projects to search results.
Added ability to restrict visibility levels standard users can set.
2013-11-26 22:22:07 -06:00
Dmitriy Zaporozhets
c9a2765515
Merge branch '6-2-stable' of dev.gitlab.org:gitlab/gitlabhq into upstream/6-2-stable
...
Conflicts:
VERSION
app/models/group.rb
app/views/groups/edit.html.haml
db/schema.rb
doc/api/groups.md
doc/api/projects.md
doc/install/installation.md
lib/api/projects.rb
spec/requests/api/groups_spec.rb
spec/requests/api/projects_spec.rb
2013-10-31 14:29:48 +02:00
Angus MacArthur
aefe2e952f
Fixing unsafe use of Thread.current variable :current_user
2013-10-16 01:20:53 -04:00
Dmitriy Zaporozhets
3cbfb1ee7c
Remove .git from project url end redirect
...
Ex. redirect from
localhost/group/project.git
to
localhost/group/project
It used to prevent 404 error when follow submodule http link
like http://localhost/group/project.git
2013-10-14 13:27:39 +03:00
Dmitriy Zaporozhets
172eb64deb
LDAP user filter option in gitlab.yml
...
Now you are able to specify LDAP user filter string in gitlab.yml.
So its possible to exclude some users from accessing gitlab.
If user with LDAP account not matching this filter will try to login or
use gitlab he will get error message like 'Access denied for your LDAP
account' and will be signed out.
2013-10-01 14:45:21 +03:00
Dmitriy Zaporozhets
0c5a9f20b5
Merge branch '6-1-stable' of https://dev.gitlab.org/gitlab/gitlabhq into 6-1-stable-ee
...
Conflicts:
VERSION
app/controllers/application_controller.rb
app/controllers/omniauth_callbacks_controller.rb
app/models/merge_request.rb
app/models/user.rb
app/views/groups/_projects.html.haml
config/routes.rb
db/schema.rb
doc/install/installation.md
2013-09-27 15:24:54 +03:00
Izaak Alpert
ca1b67ce38
Don't show users password change page if ldap users
2013-09-17 22:38:08 -04:00
Dmitriy Zaporozhets
17af835387
Add event filter for group and project show pages
2013-08-26 16:30:03 +03:00
Dmitriy Zaporozhets
fb492386c5
Fix accidentally removed class name
2013-08-21 12:33:12 +03:00
Dmitriy Zaporozhets
fd1661468f
Remove can_create_team code from user
2013-08-21 12:31:47 +03:00
Dmitriy Zaporozhets
f8475f73cc
do ldap access check only if current_user defined
2013-08-10 18:15:51 +03:00
Dmitriy Zaporozhets
99efbc8cee
Do ldap permissions update every hour
2013-08-09 15:54:58 +03:00
Dmitriy Zaporozhets
9ea5766c35
Improve permissions on tags/branches
2013-07-17 08:26:00 +03:00
Dmitriy Zaporozhets
b3ef63a0a5
Migrate global project taks. Removed more teams related functionality
2013-06-19 19:48:48 +03:00
Dmitriy Zaporozhets
fbf6989903
Force admin to change password after first sign-in
2013-06-13 20:06:33 +03:00
Dmitriy Zaporozhets
94be732026
Add password_expires_at to users table
2013-06-13 20:01:35 +03:00
Dmitriy Zaporozhets
5b40780290
Password expire: implement password resource inside profile. add before_fiter check
2013-06-13 19:53:04 +03:00
Dmitriy Zaporozhets
993af5d0d2
cattr_accessor is not threadsafe!
2013-06-11 18:15:18 +03:00
Jean-Luc Geering
57497e9f25
enforce secure gravatar urls when Gitlab.config.gitlab.https is set
2013-05-31 10:30:21 +02:00
Peter LeFanu Lumsdaine
6b4602a733
Grammar fix in error message for blocked login (in "application_controller.rb")
2013-05-28 14:48:51 -03:00
Dmitriy Zaporozhets
233eb1c693
Rename repo feature
2013-05-25 00:07:19 +03:00
Dmitriy Zaporozhets
634cbd7138
Refactor API classes. So api classes like Gitlab::Issues become API::Issues
2013-05-14 15:33:31 +03:00
Dmitriy Zaporozhets
2fc236177f
Merge pull request #3801 from holdtotherod/feature/internally-public-projects
...
Internally public projects
2013-05-03 00:00:48 -07:00
Stephen Lottermoser and Stephen Lottermoser
4c44c5ef9a
Internally public projects
...
Public projects listed in the public section will be linked to the
actual project's page. Public projects now give any user Guest
permissions to the project, allowing them to download the code, read
and create issues, and view anything else in the project's pages.
Ample access tests have been added to the project_access_spec to
verify correct permissions and behavior on public projects.
- Visitors to the site who are not logged in still cannot view the
project's pages.
- Logged-in users visiting a public project where they are not a team
member can create issues, but not snippets. They can view the projects
code, issues, merge requests, etc, just as if they were a Guest member
of the project.
- Since this is a public project, the user is also granted :download_code
permissions, a permission normally reserved for Reporters, since they
can clone the repo anyways and browse commits and branches locally.
2013-05-02 00:06:59 -07:00
Christian Simon
529376bb0b
[BUGFIX] User suggest at team_members/new not working with relative_url_root
...
* Closing #3540
* Closing #3704
2013-04-24 19:40:09 +02:00