summaryrefslogtreecommitdiff
path: root/core
AgeCommit message (Collapse)Author
2008-12-17Add Item_Model::viewable() which we can use to restrict any query toBharat Mediratta
just items viewable by the active user. Ie: ORM::factory("item") ->where("name", "foo") ->find_all() Would get all items with the name "foo". ORM::factory("item") ->viewable() ->where("name", "foo") ->find_all() Restricts it to just the set of items that the user is allowed to see.
2008-12-17Fix some lint errorsBharat Mediratta
2008-12-17Clear out module list in load_modules() before trying any db operationsBharat Mediratta
2008-12-17Switch from cookie sessions to database sessions. We can't use cookieBharat Mediratta
sessions; it encodes all the value into the cookie which means little/no security, transfer costs, and storage limits.
2008-12-17Add initialization to the user module to put the user and group_idsBharat Mediratta
into the session, for easy access. This cuts down the number of queries when we're loading images through file_proxy.php
2008-12-17Improve performance by finding the item without walking the tree.Bharat Mediratta
Instead, use the level and the name to get a short list of candidates, and check each one of those. In most cases, this query should give us the right result the first time.
2008-12-17Change the album thumbnail/resize from _album.jpg to .album.pjgBharat Mediratta
because the leading underscore confuses the Kohana router.
2008-12-17Separate thumbnails out into var/thumbs. This clears up some ambiguity in ↵Bharat Mediratta
Item_Model and simplifies file_proxy. It also means we can stop munging file names in the var/resizes hierarchy. In the process, rename "thumbnail" to "thumb" everywhere in honor of Chad (well, ok because it's shorter)..
2008-12-16Remove error checking; if this fails let it fail noisily for now so that we ↵Bharat Mediratta
can find problems faster.
2008-12-16Remove all caching from ORM_MPTT. This was premature optimization: itBharat Mediratta
wasn't benefitting us, and it will get in the way when we want to add implicit view protection to our queries.
2008-12-16Add file_proxy. This is controller gets triggered by .htaccessBharat Mediratta
protection on var/albums and var/resizes and only displays files to the user if they have "view" permission on the base ite.
2008-12-161) Remove the load watermark from the scaffolding... use the menu optionTim Almdal
2) The set watermark dialog is now sizing properly. @todo is recenter in the window
2008-12-16Alphabetize field names to make it easier to find 'em.Bharat Mediratta
2008-12-16Change htaccess rules to use mod_rewriteBharat Mediratta
2008-12-16TEST_MODE always exists now, so check its value, don't rely on its existence ↵Bharat Mediratta
to know that we're in test mode.
2008-12-16Don't use model_cache for get_version and set_version; that breaks the ↵Bharat Mediratta
installer.
2008-12-16Use model_cache::get() to reduce duplicate queriesBharat Mediratta
2008-12-16Fix a bug where we were using module::set_var() instead of module::get_var() ↵Bharat Mediratta
resulting in loading all photos in an album on a single page and updating the var on every page load.
2008-12-16Make the profiler output more legible by adding some padding to the table.Bharat Mediratta
2008-12-16Various optimizations:Bharat Mediratta
o Add model_cache::get() which caches models avoiding duplicate lookups o Stop using ORM relationships for Item_Model::owner so that we can use caching o For Item_Model::xxx_edit fields, don't make them editable for guests o Other minor stuff. These optimizations reduce the number of queries for a 9-photos page from ~200 to ~45. Still way too many!
2008-12-16Fix a bug where we were not deleting the .htaccess file on access::reset()Bharat Mediratta
2008-12-16Create and delete .htaccess files based on the view permissions forBharat Mediratta
the group::everybody() user.
2008-12-16Fix capitalization.Bharat Mediratta
2008-12-16phpdoc cleanupBharat Mediratta
2008-12-16Permission only function on albums.Bharat Mediratta
2008-12-15Protect menus and blocks against the fact that we don't have an itemBharat Mediratta
on tag pages.
2008-12-15Update to reflect changes in Kohana ORM relationship code.Bharat Mediratta
Now you must call ORM::save() after ORM::add() and ORM::remove().
2008-12-15The admin high level menu is shown if the active user is not a guest. Other ↵Tim Almdal
sub menus depend on the appropriate level of access
2008-12-151) Move the deletion of the vars into module::delete helperTim Almdal
2) remove the watermark_add_form.html.php
2008-12-15Rename default_admin to admin_default.Bharat Mediratta
2008-12-15Rename default_admin to admin_default.Bharat Mediratta
2008-12-15Add Admin_ViewBharat Mediratta
2008-12-15Refactor admin dashboard.Bharat Mediratta
o Copy all the assets from default to default_admin so that they're totally separate o Get rid of $item_theme o Rename list_users.html.php to users.html.php o use __call in admin controller to allow us to load any admin page
2008-12-15mark unauthorized exception w/ a @todoBharat Mediratta
2008-12-14Change the watermark module to use forge.Tim Almdal
Also the watermark file is now stored in varpath. and the location is stored in the module vars table
2008-12-14load admin subpages AJAXy wayFelix Rabinovich
2008-12-14convert single quotes to double quotes for consistency.Bharat Mediratta
2008-12-14The start of the watermark module. It doesn't save the watermark at this ↵Tim Almdal
point. This is more of trying out the approach where Forge is not used for forms. Basic html and the Validation library.
2008-12-14refactored admin views and added 'List User'Felix Rabinovich
2008-12-14clean the links and require authorization before showing admin pagesFelix Rabinovich
2008-12-141. fix up the <link> and <script> elements in the dashboard <head>.Felix Rabinovich
2. made the images work properly
2008-12-141) fix Forge_Group to display the label (will raise a bug with Kohana)Tim Almdal
2) Change form.html.php to use the group label instead of the name 3) Converted the add photo to explicity set the label of the field (new coding standard)
2008-12-14Fixed tabs and line endingsFelix Rabinovich
2008-12-14Created admin controller and made admin obey admin theme settingsFelix Rabinovich
2008-12-13Fix a bug where parent permissions were not getting inherited to newlyBharat Mediratta
created albums and photos.
2008-12-13Make sure that access::can fails if the item is not loadedBharat Mediratta
2008-12-13Set the resize and thumbnail maximum dimension into the module vars tableTim Almdal
2008-12-13Set thumbnails to 200x200 and resizes to 640x640 and let the Image::resize ↵Tim Almdal
method pick the right aspect ratio
2008-12-12Change the check from class_exists to module::is_installedTim Almdal
2008-12-12Change the resize option on creating thumbnails and resizes to Image::AUTO ↵Tim Almdal
which will preserve the aspect ratio of the original image