| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Todos sorting dropdownissue_18135 | Felipe Artur | 2016-08-19 | 1 | -0/+1 |
| | | |||||
| * | Recover usage of Todos counter cache20842-todos-queries-cache | Paco Guzman | 2016-08-12 | 1 | -2/+2 |
| | | | | | | | | We’re being kept up to date the counter data but we’re not using it. The only thing which is not real if is the number of projects that the user read changes the number of todos can be stale for some time. The counters will be sync just after the user receives a new todo or mark any as done | ||||
| * | Cache todos pending/done dashboard query counts | Paco Guzman | 2016-07-12 | 1 | -4/+9 |
| | | |||||
| * | Fix an information disclosure when requesting access to a group containing ↵ | Rémy Coutable | 2016-06-24 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | private projects The issue was with the `User#groups` and `User#projects` associations which goes through the `User#group_members` and `User#project_members`. Initially I chose to use a secure approach by storing the requester's user ID in `Member#created_by_id` instead of `Member#user_id` because I was aware that there was a security risk since I didn't know the codebase well enough. Then during the review, we decided to change that and directly store the requester's user ID into `Member#user_id` (for the sake of simplifying the code I believe), meaning that every `group_members` / `project_members` association would include the requesters by default... My bad for not checking that all the `group_members` / `project_members` associations and the ones that go through them (e.g. `Group#users` and `Project#users`) were made safe with the `where(requested_at: nil)` / `where(members: { requested_at: nil })` scopes. Now they are all secure. Signed-off-by: Rémy Coutable <remy@rymai.me> | ||||
| * | Ensure Todos counters doesn't count Todos for projects pending delete | Douglas Barbosa Alexandre | 2016-06-17 | 1 | -13/+8 |
| | | |||||
| * | Cache todo counters (pending/done)18034-cache-todo-counter | Paco Guzman | 2016-06-17 | 1 | -4/+4 |
| | | | | | | | | - As todos are created/updated inside the TodoService we repopulate the cache just there for both pending/done todos - Todos as mark as done from the TodosController we update cache there too - All the added methods are kept in the User class for cohesion | ||||
| * | Merge branch 'meinac/gitlab-ce-change_deprecated_render_usage' | Dmitriy Zaporozhets | 2016-05-18 | 1 | -2/+2 |
| |\ | | | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| | * | Change deprecated usage of rendering without response body | Mehmet Emin İNAÇ | 2016-03-16 | 1 | -2/+2 |
| | | | | | | | | | | | `render nothing: true` has been deprecated. For more information see [pr](https://github.com/rails/rails/pull/20336) | ||||
| * | | Merge branch '17249-starred' into 'master' | Robert Speicher | 2016-05-11 | 1 | -1/+1 |
| |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Restrict starred projects to viewable ones `User#starred_projects` doesn't perform any visibility checks. This has a couple of problems: 1. It assumes a user can always view all of their starred projects in perpetuity (project not changed to private, access revoked, etc.). 2. It assumes that we'll only ever allow a user to star a project they can view. This is currently the case, but bugs happen. Add `User#viewable_starred_projects` to filter the starred projects by those the user either has explicit access to, or are public or internal. Then use that in all places where we list the user's starred projects. Closes #17249. See merge request !4108 | ||||
| | * | | Restrict starred projects to viewable ones | Sean McGivern | 2016-05-10 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | `User#starred_projects` doesn't perform any visibility checks. This has a couple of problems: 1. It assumes a user can always view all of their starred projects in perpetuity (project not changed to private, access revoked, etc.). 2. It assumes that we'll only ever allow a user to star a project they can view. This is currently the case, but bugs happen. Add `User#viewable_starred_projects` to filter the starred projects by those the user either has explicit access to, or are public or internal. Then use that in all places where we list the user's starred projects. | ||||
| * | | | Add to label :id to responseissue_15673 | Alfredo Sumaran | 2016-05-03 | 1 | -1/+1 |
| |/ / | |||||
| * | | Add missing Dashboard::LabelsController | Rémy Coutable | 2016-03-23 | 1 | -0/+9 |
| | | | |||||
| * | | Use respond_to instead of a conditional to paginate milestones | Rémy Coutable | 2016-03-23 | 1 | -3/+4 |
| | | | |||||
| * | | Fix an issue causing the Dashboard/Milestones page to be blank | Rémy Coutable | 2016-03-23 | 2 | -6/+12 |
| | | | |||||
| * | | Use the configured Kaminari "per page" defaultrs-use-kaminari-default | Robert Speicher | 2016-03-19 | 4 | -5/+5 |
| | | | |||||
| * | | Use todo.done without ! in the controller to mark todo as done | Douglas Barbosa Alexandre | 2016-03-18 | 1 | -2/+2 |
| | | | |||||
| * | | Mark all as done through AJAX | Phil Hughes | 2016-03-17 | 1 | -0/+4 |
| | | | |||||
| * | | Removed the flash success message | Phil Hughes | 2016-03-17 | 1 | -2/+2 |
| | | | | | | | | | Removes the group if empty | ||||
| * | | Adds small AJAX optimistic functionality to todos. | Jacob Schatz | 2016-03-17 | 1 | -1/+6 |
| |/ | | | | | Fixes #13656 A good first step and boring solution. | ||||
| * | Allow filtered dashboard/explore results to be paged. Fixes #14104fix-filtered-pagination | Josh Frye | 2016-03-09 | 1 | -2/+2 |
| | | |||||
| * | Add option to show archived projects on dahsboard | Dmitriy Zaporozhets | 2016-03-04 | 1 | -16/+8 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Revert "Revert "Sort starred projects on dashboard based on last activity by ↵sort-starred-projects | Dmitriy Zaporozhets | 2016-03-03 | 1 | -1/+1 |
| | | | | | | | default"" This reverts commit 617bb1096deb1fb5dea66d04b9bbd7da0dfb57ba. | ||||
| * | Revert "Sort starred projects on dashboard based on last activity by default" | Dmitriy Zaporozhets | 2016-03-03 | 1 | -1/+1 |
| | | | | | This reverts commit 70d6455284717f938016b1e1b569e0d0dadb11fc. | ||||
| * | Sort starred projects on dashboard based on last activity by default | Dmitriy Zaporozhets | 2016-03-03 | 1 | -1/+1 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Don't show "Welcome to GitLab" when the search didn't return any projects | Rémy Coutable | 2016-03-02 | 1 | -2/+2 |
| | | |||||
| * | Does not raise an error when Todo is already marked as done | Douglas Barbosa Alexandre | 2016-02-23 | 1 | -1/+1 |
| | | |||||
| * | Use before_action instead of before_filter | Douglas Barbosa Alexandre | 2016-02-21 | 1 | -1/+1 |
| | | |||||
| * | Add "Mark all as done" button | Douwe Maan | 2016-02-20 | 1 | -1/+15 |
| | | |||||
| * | Fix rubucop offenses | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -2/+0 |
| | | |||||
| * | Rename Tasks to Todos | Douglas Barbosa Alexandre | 2016-02-20 | 2 | -21/+23 |
| | | |||||
| * | Add filters by project, author, type, and action to task queue page list | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -7/+1 |
| | | |||||
| * | Fix rubocop offenses | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -5/+5 |
| | | |||||
| * | Remove task abilities, since we will only ever show the user their own | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -8/+0 |
| | | |||||
| * | Add pending tasks badge on top right next to the new and logout button | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -3/+0 |
| | | |||||
| * | Allow user to mark each task as done manually | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -0/+23 |
| | | |||||
| * | Add tasks queue list page | Douglas Barbosa Alexandre | 2016-02-20 | 1 | -0/+15 |
| | | |||||
| * | MR feedback | Josh Frye | 2016-02-09 | 1 | -2/+2 |
| | | |||||
| * | Extract events rendering to own action. | Josh Frye | 2016-02-09 | 1 | -2/+2 |
| | | |||||
| * | Fix double paging | Josh Frye | 2016-02-05 | 1 | -1/+1 |
| | | |||||
| * | Various filter fixes | Josh Frye | 2016-02-04 | 1 | -3/+11 |
| | | |||||
| * | Paginate + ajax filter dashboard projects | Josh Frye | 2016-02-04 | 1 | -0/+12 |
| | | |||||
| * | Page project list on dashboard | Josh Frye | 2016-02-04 | 1 | -0/+2 |
| | | |||||
| * | Add sort dropdown to dashboard projects pagedashboard-sort-dropdown | Dmitriy Zaporozhets | 2016-02-03 | 1 | -0/+1 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Don't pluck project IDs for events | Yorick Peterse | 2016-01-26 | 1 | -1/+1 |
| | | | | | | By instead using a sub-query we save ourselves the overhead of loading any data into memory only to pass it on to another query. | ||||
| * | Fixed Rubocop offenses | Gabriel Mazetto | 2015-12-15 | 1 | -1/+2 |
| | | |||||
| * | Refactor global and group milestones logic | Dmitriy Zaporozhets | 2015-11-16 | 1 | -22/+7 |
| | | | | | Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | ||||
| * | Add last push widget to starred projects dashboard | Drew Blessing | 2015-10-01 | 1 | -0/+1 |
| | | |||||
| * | Clean up overlap between dashboard and explore. | Douwe Maan | 2015-09-08 | 2 | -0/+25 |
| | | | | | | - Split up SnippetsController into separate dashboard and explore sections. - Use consistent page titles, header titles and sidebars between dashboard and explore sections when signed in or not. | ||||
| * | Add helpers for header title and sidebar, and move setting those from ↵ | Douwe Maan | 2015-05-01 | 1 | -9/+1 |
| | | | | | controllers to layouts. | ||||
| * | Add a page title to every page. | Douwe Maan | 2015-04-30 | 4 | -3/+14 |
| | | |||||
 |
index : delta/gitlab/gitlab-ce.git | |
| gitlab.com: gitlab-org/gitlab-ce.git |
| summaryrefslogtreecommitdiff |