summaryrefslogtreecommitdiff
path: root/core
AgeCommit message (Collapse)Author
2008-12-20Add a missing colon.Bharat Mediratta
2008-12-20Internationalize.Bharat Mediratta
2008-12-20Replace placeholders with real dataBharat Mediratta
2008-12-20Collapse Admin_Dashboard_Controller down into a single theme call, since nowBharat Mediratta
all dashboard blocks are stored in modules.
2008-12-20Move Recent Comments into its own block.Bharat Mediratta
2008-12-20Move log entries into its own blockBharat Mediratta
2008-12-20Move the "Photo Stream" section into its own blockBharat Mediratta
2008-12-20Move the "status messages" section into its own block.Bharat Mediratta
2008-12-20Move Platform and Project News admin sidebar blocks into the newBharat Mediratta
modular structure.
2008-12-20Add admin sidebar blocks, and move the stats block into that pattern.Bharat Mediratta
2008-12-20Create a pattern for admin dashboard blocks and make the "welcome"Bharat Mediratta
block.
2008-12-20Create module::load_themes() to load the correct theme after we doBharat Mediratta
routing and know whether we're going to an /admin page or a regular one.
2008-12-19Fix a bug in admin delegation.Bharat Mediratta
2008-12-19Add access::forbidden()Bharat Mediratta
2008-12-19Create a new pattern for Site Admin controllers:Bharat Mediratta
1) They must all start with "admin_". This pattern is not directly routable. 2) Their urls must be /admin/xxx. 3) The Admin_Controller will take the xxx and look for Admin_Xxx_Controller and will delegate to that admin controller, after doing security checks. Moved the users and dashboard views into individual modules for now.
2008-12-19Delete the var/thumbs .htaccess files, too.Bharat Mediratta
2008-12-19We always have at least 1 page in an album.Bharat Mediratta
2008-12-19Add session based CSRF protection to all formsBharat Mediratta
2008-12-19Allow server-side adding of images to other albums than the rootBharat Mediratta
2008-12-18Don't wrap hidden inputs in <li/>Bharat Mediratta
2008-12-18Refactor site admin menu into a theme function and build the menus inBharat Mediratta
the various modules. In the process, rename xxx_menu::site_navigation() to just xxx_menu::site(). And add xxx_menu::admin(). The menus are the same as before, but I changed the HTML to be consistent with the way that we do it in the regular site, and this broke the superfish styles. I don't know how to fix this.. help me Chad!
2008-12-18I'm tired of clicking. Here are a few Selenium IDE tests.Chad Kieffer
2008-12-17Add Item_Model::viewable() which we can use to restrict any query toBharat Mediratta
just items viewable by the active user. Ie: ORM::factory("item") ->where("name", "foo") ->find_all() Would get all items with the name "foo". ORM::factory("item") ->viewable() ->where("name", "foo") ->find_all() Restricts it to just the set of items that the user is allowed to see.
2008-12-17Fix some lint errorsBharat Mediratta
2008-12-17Clear out module list in load_modules() before trying any db operationsBharat Mediratta
2008-12-17Switch from cookie sessions to database sessions. We can't use cookieBharat Mediratta
sessions; it encodes all the value into the cookie which means little/no security, transfer costs, and storage limits.
2008-12-17Add initialization to the user module to put the user and group_idsBharat Mediratta
into the session, for easy access. This cuts down the number of queries when we're loading images through file_proxy.php
2008-12-17Improve performance by finding the item without walking the tree.Bharat Mediratta
Instead, use the level and the name to get a short list of candidates, and check each one of those. In most cases, this query should give us the right result the first time.
2008-12-17Change the album thumbnail/resize from _album.jpg to .album.pjgBharat Mediratta
because the leading underscore confuses the Kohana router.
2008-12-17Separate thumbnails out into var/thumbs. This clears up some ambiguity in ↵Bharat Mediratta
Item_Model and simplifies file_proxy. It also means we can stop munging file names in the var/resizes hierarchy. In the process, rename "thumbnail" to "thumb" everywhere in honor of Chad (well, ok because it's shorter)..
2008-12-16Remove error checking; if this fails let it fail noisily for now so that we ↵Bharat Mediratta
can find problems faster.
2008-12-16Remove all caching from ORM_MPTT. This was premature optimization: itBharat Mediratta
wasn't benefitting us, and it will get in the way when we want to add implicit view protection to our queries.
2008-12-16Add file_proxy. This is controller gets triggered by .htaccessBharat Mediratta
protection on var/albums and var/resizes and only displays files to the user if they have "view" permission on the base ite.
2008-12-161) Remove the load watermark from the scaffolding... use the menu optionTim Almdal
2) The set watermark dialog is now sizing properly. @todo is recenter in the window
2008-12-16Alphabetize field names to make it easier to find 'em.Bharat Mediratta
2008-12-16Change htaccess rules to use mod_rewriteBharat Mediratta
2008-12-16TEST_MODE always exists now, so check its value, don't rely on its existence ↵Bharat Mediratta
to know that we're in test mode.
2008-12-16Don't use model_cache for get_version and set_version; that breaks the ↵Bharat Mediratta
installer.
2008-12-16Use model_cache::get() to reduce duplicate queriesBharat Mediratta
2008-12-16Fix a bug where we were using module::set_var() instead of module::get_var() ↵Bharat Mediratta
resulting in loading all photos in an album on a single page and updating the var on every page load.
2008-12-16Make the profiler output more legible by adding some padding to the table.Bharat Mediratta
2008-12-16Various optimizations:Bharat Mediratta
o Add model_cache::get() which caches models avoiding duplicate lookups o Stop using ORM relationships for Item_Model::owner so that we can use caching o For Item_Model::xxx_edit fields, don't make them editable for guests o Other minor stuff. These optimizations reduce the number of queries for a 9-photos page from ~200 to ~45. Still way too many!
2008-12-16Fix a bug where we were not deleting the .htaccess file on access::reset()Bharat Mediratta
2008-12-16Create and delete .htaccess files based on the view permissions forBharat Mediratta
the group::everybody() user.
2008-12-16Fix capitalization.Bharat Mediratta
2008-12-16phpdoc cleanupBharat Mediratta
2008-12-16Permission only function on albums.Bharat Mediratta
2008-12-15Protect menus and blocks against the fact that we don't have an itemBharat Mediratta
on tag pages.
2008-12-15Update to reflect changes in Kohana ORM relationship code.Bharat Mediratta
Now you must call ORM::save() after ORM::add() and ORM::remove().
2008-12-15The admin high level menu is shown if the active user is not a guest. Other ↵Tim Almdal
sub menus depend on the appropriate level of access