| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2008-12-22 | Normalize CSRF handling into the access helper. Probably not the best | Bharat Mediratta | |
| place for it, but it'll do for now. Do CSRF checking in the Admin controller so that we're safe across the board on the admin side. | |||
| 2008-12-22 | Lock a couple of modules | Bharat Mediratta | |
| 2008-12-22 | Add some admin theme callbacks and make them explicitly admin_xxx for ↵ | Bharat Mediratta | |
| consistency with the callbacks in the xxx_block helpers. So in the theme we have: admin.html.php: $theme->admin_page_bottom() then in the helpers: core_block.php: function admin_page_bottom() { } | |||
| 2008-12-22 | Change the way that we track modules. | Bharat Mediratta | |
| Each module now has a "module.info" file that has information about the module, including the core. We can display the installed version, and the version in the code. Also take a first shot at a modules admin page. | |||
| 2008-12-21 | Add phpdoc comments. | Bharat Mediratta | |
| 2008-12-21 | Swap "Content" and "Modules" | Bharat Mediratta | |
| 2008-12-21 | INFO -> log::INFO | Bharat Mediratta | |
| 2008-12-21 | Report actual log entries in the "log entries" admin block. | Bharat Mediratta | |
| 2008-12-21 | Add a logging facility, and instrument login/logout to use it. | Bharat Mediratta | |
| 2008-12-21 | Implement the 'Project News' block with actual news from GMC.. woot! | Bharat Mediratta | |
| 2008-12-20 | Implement the photo stream with the most recently uploaded photos. | Bharat Mediratta | |
| 2008-12-20 | Add "created" and "updated" timestamps to the items table. | Bharat Mediratta | |
| 2008-12-20 | Add view counts and show them properly. | Bharat Mediratta | |
| 2008-12-20 | use some real stats | Bharat Mediratta | |
| 2008-12-20 | Move log entries into its own block | Bharat Mediratta | |
| 2008-12-20 | Move the "Photo Stream" section into its own block | Bharat Mediratta | |
| 2008-12-20 | Move the "status messages" section into its own block. | Bharat Mediratta | |
| 2008-12-20 | Move Platform and Project News admin sidebar blocks into the new | Bharat Mediratta | |
| modular structure. | |||
| 2008-12-20 | Add admin sidebar blocks, and move the stats block into that pattern. | Bharat Mediratta | |
| 2008-12-20 | Create a pattern for admin dashboard blocks and make the "welcome" | Bharat Mediratta | |
| block. | |||
| 2008-12-20 | Create module::load_themes() to load the correct theme after we do | Bharat Mediratta | |
| routing and know whether we're going to an /admin page or a regular one. | |||
| 2008-12-19 | Add access::forbidden() | Bharat Mediratta | |
| 2008-12-19 | Create a new pattern for Site Admin controllers: | Bharat Mediratta | |
| 1) They must all start with "admin_". This pattern is not directly routable. 2) Their urls must be /admin/xxx. 3) The Admin_Controller will take the xxx and look for Admin_Xxx_Controller and will delegate to that admin controller, after doing security checks. Moved the users and dashboard views into individual modules for now. | |||
| 2008-12-19 | Delete the var/thumbs .htaccess files, too. | Bharat Mediratta | |
| 2008-12-18 | Refactor site admin menu into a theme function and build the menus in | Bharat Mediratta | |
| the various modules. In the process, rename xxx_menu::site_navigation() to just xxx_menu::site(). And add xxx_menu::admin(). The menus are the same as before, but I changed the HTML to be consistent with the way that we do it in the regular site, and this broke the superfish styles. I don't know how to fix this.. help me Chad! | |||
| 2008-12-17 | Fix some lint errors | Bharat Mediratta | |
| 2008-12-17 | Clear out module list in load_modules() before trying any db operations | Bharat Mediratta | |
| 2008-12-17 | Switch from cookie sessions to database sessions. We can't use cookie | Bharat Mediratta | |
| sessions; it encodes all the value into the cookie which means little/no security, transfer costs, and storage limits. | |||
| 2008-12-17 | Add initialization to the user module to put the user and group_ids | Bharat Mediratta | |
| into the session, for easy access. This cuts down the number of queries when we're loading images through file_proxy.php | |||
| 2008-12-17 | Separate thumbnails out into var/thumbs. This clears up some ambiguity in ↵ | Bharat Mediratta | |
| Item_Model and simplifies file_proxy. It also means we can stop munging file names in the var/resizes hierarchy. In the process, rename "thumbnail" to "thumb" everywhere in honor of Chad (well, ok because it's shorter).. | |||
| 2008-12-16 | Add file_proxy. This is controller gets triggered by .htaccess | Bharat Mediratta | |
| protection on var/albums and var/resizes and only displays files to the user if they have "view" permission on the base ite. | |||
| 2008-12-16 | Alphabetize field names to make it easier to find 'em. | Bharat Mediratta | |
| 2008-12-16 | Change htaccess rules to use mod_rewrite | Bharat Mediratta | |
| 2008-12-16 | Don't use model_cache for get_version and set_version; that breaks the ↵ | Bharat Mediratta | |
| installer. | |||
| 2008-12-16 | Use model_cache::get() to reduce duplicate queries | Bharat Mediratta | |
| 2008-12-16 | Various optimizations: | Bharat Mediratta | |
| o Add model_cache::get() which caches models avoiding duplicate lookups o Stop using ORM relationships for Item_Model::owner so that we can use caching o For Item_Model::xxx_edit fields, don't make them editable for guests o Other minor stuff. These optimizations reduce the number of queries for a 9-photos page from ~200 to ~45. Still way too many! | |||
| 2008-12-16 | Fix a bug where we were not deleting the .htaccess file on access::reset() | Bharat Mediratta | |
| 2008-12-16 | Create and delete .htaccess files based on the view permissions for | Bharat Mediratta | |
| the group::everybody() user. | |||
| 2008-12-16 | Fix capitalization. | Bharat Mediratta | |
| 2008-12-16 | phpdoc cleanup | Bharat Mediratta | |
| 2008-12-16 | Permission only function on albums. | Bharat Mediratta | |
| 2008-12-15 | Protect menus and blocks against the fact that we don't have an item | Bharat Mediratta | |
| on tag pages. | |||
| 2008-12-15 | The admin high level menu is shown if the active user is not a guest. Other ↵ | Tim Almdal | |
| sub menus depend on the appropriate level of access | |||
| 2008-12-15 | 1) Move the deletion of the vars into module::delete helper | Tim Almdal | |
| 2) remove the watermark_add_form.html.php | |||
| 2008-12-15 | Rename default_admin to admin_default. | Bharat Mediratta | |
| 2008-12-14 | load admin subpages AJAXy way | Felix Rabinovich | |
| 2008-12-14 | 1) fix Forge_Group to display the label (will raise a bug with Kohana) | Tim Almdal | |
| 2) Change form.html.php to use the group label instead of the name 3) Converted the add photo to explicity set the label of the field (new coding standard) | |||
| 2008-12-14 | Created admin controller and made admin obey admin theme settings | Felix Rabinovich | |
| 2008-12-13 | Fix a bug where parent permissions were not getting inherited to newly | Bharat Mediratta | |
| created albums and photos. | |||
| 2008-12-13 | Make sure that access::can fails if the item is not loaded | Bharat Mediratta | |
