Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-02-14 | Fix for ticket #491: Make user and group names translatable. | Andy Staudacher | |
Also fixed a UI bug: No longer showing the edit user buttons to admins in the profile view (to be consistent with the requirements in the controller). | |||
2010-02-14 | Fix for ticket 901: Wrap Gallery version string into bdo tag to override the ↵ | Andy Staudacher | |
BiDi algorithm. Also, properly marking the "Powere by" string for translation. See: http://www.w3.org/International/tutorials/bidi-xhtml/#Slide0420 | |||
2010-02-14 | Need to allow access to ::change_provider for CLI, to make packager work. | Andy Staudacher | |
2010-02-14 | Enable session expiration. Currently, it's set to expire sessions after 7 ↵ | Andy Staudacher | |
days of inactivity. | |||
2010-02-14 | Minor security tightening of IdentityProvider::change_provider(). | Andy Staudacher | |
2010-02-14 | Create an items REST collection requests that accepts a list of resource ↵ | Tim Almdal | |
urls and returns the items associated with them. | |||
2010-02-14 | Remove the dirty flags from the information returned from the rest request ↵ | Tim Almdal | |
for an item. In addition, add links to the images. | |||
2010-02-14 | If the return object is empty still return the empty object in the json ↵ | Tim Almdal | |
response. | |||
2010-02-14 | Change JavaScript reauthentication check to check via XHR. | Andy Staudacher | |
Benefit: Getting the real deadline this way, not interfering with an ongoing maintenance task. | |||
2010-02-14 | HTML validation, avoid empty <ul> | Andy Staudacher | |
2010-02-14 | HTML validation fix (<script>) | Andy Staudacher | |
2010-02-14 | Some HTML validation fixes (don't render empty <ul> lists, empty id ↵ | Andy Staudacher | |
attributes, use & not &) | |||
2010-02-14 | For consistency, use straight Kohana_404_Exception instead of the event system. | Andy Staudacher | |
2010-02-12 | Tighten up the text. | Bharat Mediratta | |
2010-02-12 | Fix for tickets 1009 and 603: Show a themed error page to guests / ↵ | Andy Staudacher | |
registered users (not to admins though). And show a login form to guests for 404 (incl. insufficient view permissions) errors. | |||
2010-02-12 | Revert "1) Add a depth parameter to retrieving an item thru the rest api" | Bharat Mediratta | |
This reverts commit 3439671bcfb99c1884285e4b4e53295f044e688f. | |||
2010-02-12 | 1) Add a depth parameter to retrieving an item thru the rest api | Tim Almdal | |
2) Standardize the structure of members so that client programs can consistently parse the return information. 3) Added a summary parameter so that client programs can easily determine if the information returned is summary (item type, item title) or the full meal deal | |||
2010-02-11 | Get rid of unnecessary view file. | Andy Staudacher | |
2010-02-11 | Include user name in logging message for failed password reset. As Bharat ↵ | Andy Staudacher | |
points out, t() ensures that parameters are escaped for XSS. | |||
2010-02-11 | Security: Fix leaking of album / photo names. Reject previous fix for ticket ↵ | Andy Staudacher | |
1009. Side effect: Renaming auth::required_login() to login_page(). | |||
2010-02-11 | Fix for ticket 1010: Don't leak valid user names in "forgot password" form. | Andy Staudacher | |
Includes fixes for user forms as well (edit user / email / password). | |||
2010-02-11 | Use the admin/users/edit_user_form version of the user editing form | Bharat Mediratta | |
right after initial install so that we're not requiring the user to re-enter the auto-generated password to change their password and email. Fixes ticket #1007 | |||
2010-02-10 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-10 | Refactor the code to display the login page if the user does not have view | Tim Almdal | |
permission into the common auth::require_login() method. | |||
2010-02-10 | If the user does not have permission to view the album, photo or movie, redirect | Tim Almdal | |
to a logon page to allow the user to login. Pass the target url as a session variable to allow the user to be redirected where they want to go if the login was successful. Fixes ticket #1009. | |||
2010-02-10 | Use the helper ulr:current instead of manually creating the continue url. | Tim Almdal | |
2010-02-09 | Revise the "review your permission" text to my liking. | Bharat Mediratta | |
2010-02-09 | Move diff::compare to be test::diff | Bharat Mediratta | |
2010-02-09 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-09 | Formated upgrader for RTL languages. Closes ticket #883 | Chad Kieffer | |
2010-02-09 | Rename item name and slug if necessary to avoid a conflict when we | Bharat Mediratta | |
move photos. Fixes ticket #957. | |||
2010-02-09 | Whitespace. | Bharat Mediratta | |
2010-02-09 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-09 | Change access::can to access::required in g2 redirect, to please the ↵ | Andy Staudacher | |
controller auth code audit test. | |||
2010-02-09 | Import hashed passwords from G2 (which will only work if they're ↵ | Andy Staudacher | |
PasswordHash passwords, not if they're G2 style md5 / salted md5). | |||
2010-02-09 | Better handling of G2's multi level sort order in g2_import | Andy Staudacher | |
2010-02-09 | Add unit tests for item::move() in preparation for renaming when there | Bharat Mediratta | |
are conflicts (see ticket #957) | |||
2010-02-09 | Fix password reset confirmation | Andy Staudacher | |
2010-02-09 | More g2_import model validation fixes, and make import less noisy (don't ↵ | Andy Staudacher | |
copy each comment text to the import log). | |||
2010-02-09 | Fix g2_import bugs related to item and user model validation. | Andy Staudacher | |
2010-02-08 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-08 | Change admin area timeout from 20 to 90 minutes | Andy Staudacher | |
2010-02-08 | Merge branch 'master' of github.com:gallery/gallery3 | Bharat Mediratta | |
2010-02-08 | Override Input::clean_input_keys() to sanitize malicious values out of | Bharat Mediratta | |
strings instead of dying. This at least gives us graceful degradation. Fixes ticket #764, patch thanks to djnz. | |||
2010-02-08 | Merge commit 'upstream/master' | Andy Staudacher | |
2010-02-08 | Suppress errors when checking for readability of /proc/loadavg. Often this ↵ | Andy Staudacher | |
file will be protected by openbasedir, and is_readable will trigger an open basedir warning. | |||
2010-02-08 | Fix the missing object problem in ie7. Fixes ticket: 1003. There is still ↵ | Tim Almdal | |
issues with selectables and draggables working together in IEx | |||
2010-02-08 | Correct tree branch alignment in IE | Tim Almdal | |
2010-02-08 | Fix for ticket 1008: Redirect to destination after re-auth. | Andy Staudacher | |
2010-02-08 | Fix Arabic language name. Thanks shaibn for reporting the issue. Verified ↵ | Andy Staudacher | |
with CLDR data. |