Software Publico / Gitlab

13 Jun, 2014

1 commit

ae564c97 Dont expose user email via API ... Browse File »

To prevent leaking of users info we reduce amount of user information
retrieved via API for normal users.

What user can get via API:

* if not admin: only id, state, name, username and avatar_url
* if admin: all user information
* about himself: all informaion

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

2014-06-13 17:46:48 +0300

10 Jun, 2014

1 commit

a7be3dfa Remove set of thread variables ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-06-10 17:51:49 +0300

04 Jun, 2014

1 commit

d95d56f0 Add current_user_id to gon vars ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-06-04 18:07:15 +0300

13 May, 2014

1 commit

5f25cdfe Implement Merge Request Labels Browse File »

Drew Blessing
2014-05-13 06:41:36 -0500

07 Apr, 2014

2 commits

84d17f79 Skip require email for devise controllers ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-04-07 14:32:59 +0300
a73df4f7 Allow oauth signup without email ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-04-07 14:09:29 +0300

14 Mar, 2014

1 commit

48e90540 Open/close LDAP in ApplicationController ... Browse File »
```
By opening the LDAP connection at the controller level we can reuse it
for all LDAP queries during the request.
```
Jacob Vosmaer
2014-03-14 09:03:49 +0100

11 Mar, 2014

2 commits

c6d39a14 Add User#requires_ldap_check? method ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-03-11 10:24:07 +0200
e57e1e04 Remove non-exist method from ldap security check ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-03-11 09:15:04 +0200

10 Mar, 2014

1 commit

b1ff8e31 Add ldap check in application_controller and internal api ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-03-10 17:10:23 +0200

26 Feb, 2014

1 commit

a9280de1 Better redirect for edit blod from MergeRequest ... Browse File »

If you cancel edit you will be redirected back to merge request
If you submit changes you will be redirected back to merge request

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>

2014-02-26 14:06:31 +0200

25 Feb, 2014

1 commit

2171bbcd Update rack profiler ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-02-25 17:41:56 +0200

12 Feb, 2014

1 commit

439a6178 User can leave group from group page. Browse File »

Ciro Santillli
2014-02-12 15:52:53 +0100

11 Feb, 2014

1 commit

348e44ef Dont use avatars for user select if avatar is disabled ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-02-11 15:49:39 +0200

14 Jan, 2014

1 commit

0c637acb Add login and remember_me to devise permit list ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2014-01-14 20:28:41 +0200

03 Jan, 2014

1 commit

8a0bfa49 Do not include subtomains in STS header. Browse File »

Marin Jankovski
2014-01-03 16:02:57 +0100

30 Dec, 2013

1 commit

94c96cd4 HTTP headers protect against MIME-sniffing, force https if enabled. Browse File »

Marin Jankovski
2013-12-30 09:41:05 +0100

27 Dec, 2013

1 commit

498ec08d Force IE use latest engine to render. Browse File »

xyb
2013-12-27 19:38:29 +0800

10 Dec, 2013

2 commits

f088c867 Fix signup for rails4 ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2013-12-10 13:35:10 +0200
b3c1d0d8 Added allow_blank to model validations ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2013-12-10 12:11:27 +0200

04 Dec, 2013

1 commit

c099074f Fix 404 on project page for unauthenticated user ... Browse File »

Eliminate a 404 error when user is not logged in and attempts to visit
a project page.

The 404 page will still show up when user is logged in and the project
doesn’t exist or the user doesn’t have access.

2013-12-04 13:10:20 -0600

29 Nov, 2013

1 commit

da10cad1 Drop rjs from Issues#index ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2013-11-29 15:05:32 +0200

28 Nov, 2013

1 commit

33aea417 Drop rjs from Infinite scrolling ... Browse File »
```
Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
```
Dmitriy Zaporozhets
2013-11-28 11:38:20 +0200

26 Nov, 2013

1 commit

d9bb4230 Adding authenticated public mode (internal). ... Browse File »

Added visibility_level icons to project view (rather than just text).
Added public projects to search results.
Added ability to restrict visibility levels standard users can set.

2013-11-26 22:22:07 -0600

16 Oct, 2013

1 commit

aefe2e95 Fixing unsafe use of Thread.current variable :current_user Browse File »

Angus MacArthur
2013-10-16 01:20:53 -0400

14 Oct, 2013

1 commit

3cbfb1ee Remove .git from project url end redirect ... Browse File »

Ex. redirect from
  localhost/group/project.git
to
  localhost/group/project

It used to prevent 404 error when follow submodule http link
like http://localhost/group/project.git

2013-10-14 13:27:39 +0300