Commit message (Collapse) | Author | Age | Lines | |
---|---|---|---|---|
* | Merge branch 'staff-sign-up-other-user-for-alert' | Matthew Somerville | 2020-01-09 | -9/+57 |
|\ | ||||
| * | Allow staff users to sign others up for alerts. | Matthew Somerville | 2020-01-08 | -0/+47 |
| | | ||||
| * | Check provided report ID for update alert signup. | Matthew Somerville | 2020-01-08 | -9/+10 |
| | | | | | | | | Remove some unused code. | |||
* | | Merge branch 'issues/commercial/1287-as-another-user-only-name' | Matthew Somerville | 2020-01-09 | -9/+17 |
|\ \ | ||||
| * | | Allow report as another user with only name. | Matthew Somerville | 2020-01-08 | -9/+17 |
| |/ | ||||
* / | Hide ‘provide extra information’ preamble when no visible fields are present | Dave Arter | 2020-01-07 | -0/+53 |
|/ | | | | | | | | | For categories that use the extra metadata fields to just show a notice message to the user, the ‘help the council fix the problem by providing extra information’ text was a bit out of place. This commit hides it unless there are actual UI elements also included in the markup. Fixes #2811. | |||
* | Clear any categories from user when unsetting from_body | Dave Arter | 2020-01-06 | -0/+24 |
| | | | | This was most likely the cause of #2815. | |||
* | Fix 'all reports' link for users with categories but no from_body | Dave Arter | 2020-01-06 | -0/+13 |
| | | | | | | | | | | | In the rare situation that a user has no from_body set but does have categories set in their extra metadata, the 'All reports' link would point to /my/inspector_redirect but this URL would 404 if the user did not have a from_body. This commit updates the template to use the same logic when generating the 'all reports' link, so users without from_body will never be sent to /my/inspector_redirect. Fixes #2815. | |||
* | Merge branch 'bexley-ooh' | Matthew Somerville | 2019-12-19 | -1/+1 |
|\ | ||||
| * | Fix test issue where CSRF token contained number. | Matthew Somerville | 2019-12-17 | -1/+1 |
| | | | | | | | | Giving a false positive. | |||
* | | Check area IDs non-empty in inspector redirect. | Matthew Somerville | 2019-12-17 | -1/+1 |
|/ | ||||
* | Store staff user when staff make anonymous report. | Dave Arter | 2019-12-17 | -0/+25 |
| | | | | | | If a staff user uses the anonymous button, it does not otherwise record which staff user did that; using Report As would store their user as the report's user. | |||
* | [Bromley] Try and make sure last name/title always present when sending. | Matthew Somerville | 2019-12-16 | -0/+2 |
| | ||||
* | [TfL] Server-side red route lookup for new report categories | Dave Arter | 2019-12-12 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | This commit checks the RedRoutes WFS layer on tilma to determine if the point at which a new report is being made is on a TfL red route. The returned categories are then adjusted accordingly: - If on a red route, all TfL categories as well as borough categories specific to street cleaning are returned. - If not on a red route, all borough categories as well as TfL categories that don't require a red route are returned. - This category tweaking doesn't happen on the TfL cobrand, as the JS handles it by signposting users to fixmystreet.com for borough reports. Doing the lookup server side means the app always shows the right categories to the user and prevents them e.g. sending a borough flytipping report to TfL. Fixes https://github.com/mysociety/fixmystreet-commercial/issues/1716 | |||
* | [TfL] Restrict reports on cobrand to post go-live. | Matthew Somerville | 2019-12-09 | -8/+1 |
| | ||||
* | [TfL] Remove Email::TfL send method as no longer needed | Dave Arter | 2019-12-09 | -33/+0 |
| | ||||
* | [TfL] Mandate 2FA for non-internal-IP staff users. | Matthew Somerville | 2019-12-09 | -0/+1 |
| | ||||
* | Allow cobrands to skip 2FA requirement. | Matthew Somerville | 2019-12-09 | -1/+19 |
| | ||||
* | Record first time fixed/closed update sent to reporter in email. | Matthew Somerville | 2019-12-09 | -0/+3 |
| | ||||
* | Include areas in query param for inspector post-login redirect to all reports | Dave Arter | 2019-12-09 | -0/+68 |
| | | | | | Performs a proper redirect instead of detaching to /my/inspector_redirect so any request params from sign-in (e.g. password!) aren't carried through. | |||
* | Group categories on response template edit page, if cobrand allows | Dave Arter | 2019-12-09 | -0/+45 |
| | ||||
* | [UK Councils] Ensure response templates owned by other bodies aren’t visible | Dave Arter | 2019-12-09 | -6/+71 |
| | ||||
* | Switch to default-escaped in email templates. | Matthew Somerville | 2019-12-09 | -3/+11 |
| | | | | | We add a way to process a template with no auto-escaping, that can be used for the text parts of emails, and mark various HTML output as safe. | |||
* | Switch to default-escaped in templates. | Matthew Somerville | 2019-12-09 | -1/+1 |
| | | | | | | | This means any variable used in a template is automatically HTML-escaped, unless it is marked as safe either in code by using a SafeString, or in the template with the `mark_safe` function or the `safe` filter. | |||
* | Fix broken alert_type test. | Matthew Somerville | 2019-12-08 | -12/+15 |
| | ||||
* | [Peterborough] add title length restriction | Struan Donald | 2019-12-03 | -1/+27 |
| | | | | Fixes mysociety/fixmystreet-freshdesk#102 | |||
* | Merge branch 'csp-uk' | Matthew Somerville | 2019-11-25 | -2/+29 |
|\ | ||||
| * | Add configuration for setting CSP header. | Matthew Somerville | 2019-11-25 | -2/+29 |
| | | | | | | | | | | | | This allows you to output a working Content-Security-Policy header, with optional third-party domains, by setting a new CONTENT_SECURITY_POLICY configuration option. | |||
* | | Merge branch 'qr-code-generator' | Matthew Somerville | 2019-11-25 | -1/+0 |
|\ \ | ||||
| * | | Switch to internal QR code generator. | Matthew Somerville | 2019-11-23 | -1/+0 |
| | | | ||||
* | | | [Oxfordshire] re-enable inspector permissions | Struan Donald | 2019-11-22 | -27/+0 |
|/ / | | | | | | | | | Re-enable the inspector permissions that were disabled at a cobrand level | |||
* | | Rotate session ID after successful login. | Matthew Somerville | 2019-11-22 | -12/+11 |
| | | ||||
* | | Replace use of FixMyStreet::App with DB in tests. | Matthew Somerville | 2019-11-22 | -219/+208 |
|/ | ||||
* | Remove cached photos before updating db field. | Matthew Somerville | 2019-11-18 | -13/+34 |
| | | | | | If the photo field is updated first, then the cache removal doesn't think there are any photos to remove. | |||
* | Merge branch 'issues/freshdesk/98-staff-ignore-emergency-message' | Struan Donald | 2019-11-15 | -0/+51 |
|\ | ||||
| * | allow staff to submit in disabled categories | Struan Donald | 2019-11-15 | -0/+51 |
| | | | | | | | | | | | | | | If a user belongs to a body override the disabled form check upon submission as mostly staff users can submit in those categories. Fixes mysociety/fixmystreet-freshdesk#98 | |||
* | | Add cobrand-specific XSL to RSS feeds. | Matthew Somerville | 2019-11-15 | -0/+17 |
|/ | ||||
* | Merge branch 'admin-auditing' | Matthew Somerville | 2019-11-10 | -8/+62 |
|\ | ||||
| * | Add user admin log page. | Matthew Somerville | 2019-11-08 | -5/+54 |
| | | ||||
| * | Store a moderation history on admin report edit. | Matthew Somerville | 2019-11-08 | -0/+7 |
| | | ||||
| * | Add admin log entry for more objects and things. | Matthew Somerville | 2019-11-08 | -1/+1 |
| | | | | | | | | | | Namely templates, roles, bodies, categories, various user edits, and when using the inspect form and changing category. | |||
| * | Factor out admin template code to own controller. | Matthew Somerville | 2019-11-08 | -2/+0 |
| | | ||||
* | | Store email addresses report sent to on the report | Matthew Somerville | 2019-11-10 | -0/+3 |
|/ | ||||
* | Fix password reset on 2FA accounts again. | Matthew Somerville | 2019-11-05 | -0/+5 |
| | | | | | | Just after fixing it, 3d593bc68 broke it again, because it took anyone who must have 2FA switched on to the must-have-2FA sign up flow, even if they already had 2FA set up. | |||
* | Add optional enforced password expiry. | Matthew Somerville | 2019-11-04 | -0/+28 |
| | ||||
* | Record time of password change. | Matthew Somerville | 2019-11-04 | -1/+3 |
| | ||||
* | Merge branch '2fa-improvements' | Matthew Somerville | 2019-10-31 | -148/+203 |
|\ | ||||
| * | If 2FA enforced, do it for an email login as well. | Matthew Somerville | 2019-10-30 | -0/+34 |
| | | ||||
| * | Fix password reset on 2FA accounts. | Matthew Somerville | 2019-10-30 | -0/+23 |
| | | ||||
| * | [UK] Mandate 2FA on superusers. | Matthew Somerville | 2019-10-30 | -7/+13 |
| | |