Commit graph

1966 commits

Author SHA1 Message Date
sfischme
f91a2867b2 merged master 2011-09-23 18:32:12 -04:00
sfischme
6f8d9ec2ae exclude completed projects from blocked list 2011-09-17 13:15:30 -04:00
sfischme
7873d2cff8 explude completed projects from review 2011-09-17 13:13:45 -04:00
sfischme
ac98737176 first version of review view 2011-09-16 23:34:09 -04:00
sfischme
5f0bcebca9 first steps towards review view 2011-09-16 15:07:58 -04:00
sfischme
01bcc7a48c code cleanup 2011-09-15 21:09:03 -04:00
sfischme
33befa88b3 added preference settings 2011-09-15 21:06:50 -04:00
sfischme
77b6c931ca added separate database field for reviews 2011-09-15 20:52:24 -04:00
sfischme
7ebf25320b better icon 2011-09-15 09:30:50 -04:00
sfischme
9d5049c9ea fixed html error 2011-09-15 09:10:12 -04:00
sfischme
07821b407d added gemfile again 2011-09-15 00:52:22 -04:00
sfischme
b320dd60a8 initial version of reviewing 2011-09-15 00:42:34 -04:00
Reinier Balt
2563532022 implement new scenarios that were pending from the selenium-on-rails removal and fix a bug it uncovered 2011-09-14 20:50:21 +02:00
Reinier Balt
9eca1557fb add tests for adding multiple todos and multiple sequential todos
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 16:29:30 +02:00
Reinier Balt
2f42fad7c9 add checkbox to multiple action form to make all actions dependent on each other (sequential)
for people wanting sequential projects

Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 15:25:15 +02:00
Reinier Balt
a332f8f557 fix #1196. You can now transition from pending to project_hidden
One side effect though: althoug dependencies are still in place, the gui cannot differentiate between pending and hidden todos. The views currently do not show dependencies anymore in hidden projects. Postponing a fix for 2.2

Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 14:22:30 +02:00
Reinier Balt
5a168beef9 fix failing tests because of newer acts_as_list gem
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 13:49:06 +02:00
Reinier Balt
d9db33bc0d fix #990 by moving rsel scripts to cucumber and removing selenium-on-rails plugin
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-14 11:29:50 +02:00
Reinier Balt
4927f39594 fix some regressions caused by the newer acts_as_list gem
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-13 11:15:14 +02:00
Reinier Balt
92c8cfe61a fix another regression by the previous two commits :-(
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-13 07:11:33 +02:00
Reinier Balt
8fe5552d64 fix regression by last commit
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-12 22:58:39 +02:00
Reinier Balt
f5cabbf74d fix #1194 by checking the project_id and context_id 2011-09-10 02:31:53 +02:00
Reinier Balt
cdff38995c add tests for toggling visibility of collapsed contexts 2011-09-10 00:51:39 +02:00
Reinier Balt
30c2fb8b82 fix one deprecation warning for rubygems >= 1.8.2 2011-09-09 22:02:02 +02:00
Reinier Balt
998231066f update locales to latest changes. Please help review the changes since I let google translate determinse translations :-) 2011-09-09 21:52:39 +02:00
popsch
067df75e98 toggle notes patch from Christian Frank 2011-09-10 05:06:03 +08:00
Reinier Balt
39a38a8f73 update plugins: 2 are available as gems, 1 updated and removed yaml_db
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-09 21:07:22 +02:00
Reinier Balt
998c14fa71 Fix updating password
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-09 17:49:42 +02:00
Reinier Balt
50875cfa40 Merge pull request #16 from jstepien/bcrypt-v2
Hash passwords with BCrypt instead of SHA1
2011-09-08 08:08:33 -07:00
Reinier Balt
23c95f2833 Merge pull request #15 from antoninb/master
fix typo in fr.yml translation
2011-09-08 08:08:18 -07:00
Antonin Blanc
81d14edc2c fix typo in fr.yml translation 2011-09-08 00:54:58 +02:00
Reinier Balt
7d9f241a12 delete selenium scripts that have cucumber equivalents
Signed-off-by: Reinier Balt <lrbalt@gmail.com>
2011-09-07 22:54:22 +02:00
Jan Stępień
342b8ab4ef Require 'bcrypt' on top of app/models/user.rb 2011-09-07 17:19:04 +02:00
Jan Stępień
97431324db Password-rehashing "down" for migration 20110727073510
Reinier Balt wrote:
> One problem I see is when people want to downgrade. You chop the
> password field back to 40 chars, but it will cause all users incapable
> of logging in. Perhaps we can put a default password in the password on
> migration.down? like sha1('secret123') so we leave Tracks operable on
> downgrade?

https://github.com/bsag/tracks-old/pull/26#issuecomment-2001500
2011-09-07 16:06:03 +02:00
Jan Stępień
db77225ff7 More SHA-1 hashes handling scenarios using outlines 2011-09-07 16:06:03 +02:00
Jan Stępień
ad1f3b5862 Users with SHA-1 hashes can reset their passwords 2011-09-07 16:06:03 +02:00
Jan Stępień
5d3829cfbf Users with SHA-1 hashes are redirected to the password change page 2011-09-07 16:06:03 +02:00
Jan Stępień
a11937788e Prevent redefinition of factories
This commit catches Factory::DuplicateDefinitionErrors raised by
factory_girl 2.1.0. See the following thread for some background.

http://groups.google.com/group/factory_girl/browse_thread/thread/4df21d9240c20198
2011-09-07 16:06:02 +02:00
Jan Stępień
e221264e74 Fixed User specs broken in commit b33044
Expressions '...should == @user' caused specs to fail because of

  ArgumentError in 'User authentication resets password'
  wrong number of arguments (0 for 1)

Replacing expectations declared for User objects with expectations declared
for their id fields solves the problem and doesn't change specs' logic.
2011-09-07 16:06:02 +02:00
Jan Stępień
e5708f5ce7 Authenticate users with deprecated SHA-1 passwords 2011-09-07 16:06:02 +02:00
Jan Stępień
8e23d11054 Added User.uses_deprecated_password? method 2011-09-07 16:06:02 +02:00
Jan Stępień
34e0573fc4 Added to fixtures a user with a SHA-1 password 2011-09-07 16:06:02 +02:00
Jan Stępień
e7301608a6 Salting is unnecessary, BCrypt takes care of it
Source: http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
2011-09-07 16:06:02 +02:00
Jan Stępień
42437eadfa Changed the length of users.crypted_password to 60 2011-09-07 16:06:01 +02:00
Jan Stępień
95f0f71441 Hash passwords with BCrypt instead of SHA1
BCrypt is regarded as a more secure alternative to hashing using message
digest algorithms, such as MD5 and SHA families [0, 1, 2]. Apart from
built-in salting it is adaptable to the increasing power of modern
processing units, which makes it more secure against brute-force cracking.

This commit makes all passwords hashed using BCrypt. The session tokens
remain generated using SHA1. Tests were updated, `rake test:units` and
`rake test:functionals` didn't report any regressions.

[0] http://bcrypt.sourceforge.net/
[1] http://en.wikipedia.org/w/index.php?title=Bcrypt&oldid=439692871
[2] eab1c72/README.md
2011-09-07 16:05:52 +02:00
Reinier Balt
e7c0f6c3d2 add two example scripts to add a todo or a project template with todos from the command line. Thanks Vitalie and Popsch! 2011-09-07 15:40:11 +02:00
Reinier Balt
0b88c72570 Merge pull request #10 from mattr-/allow-comma-in-project-names
Allow comma in project names
2011-09-02 13:51:39 -07:00
Reinier Balt
8a437595a8 Merge pull request #7 from mattr-/master
Cleanup the environment files after converting to Bundler
2011-09-02 13:46:57 -07:00
Matt Rogers
f1c40c5594 Fix up the selenium tests
There was a selenium test that verified that projects could not have
commas that was previously missed. Modify that test so that it verifies
that the project was created successfully.
2011-09-01 23:12:39 -05:00
Matt Rogers
55bf457740 Allow projects to have commas in their name.
This removes the validation that checks to make sure there is no comma
in the name, and updates the tests to match.
2011-09-01 23:12:26 -05:00