aboutsummaryrefslogtreecommitdiffstats
path: root/t/app
Commit message (Collapse)AuthorAgeLines
* Merge branch 'staff-sign-up-other-user-for-alert'Matthew Somerville2020-01-09-9/+57
|\
| * Allow staff users to sign others up for alerts.Matthew Somerville2020-01-08-0/+47
| |
| * Check provided report ID for update alert signup.Matthew Somerville2020-01-08-9/+10
| | | | | | | | Remove some unused code.
* | Merge branch 'issues/commercial/1287-as-another-user-only-name'Matthew Somerville2020-01-09-9/+17
|\ \
| * | Allow report as another user with only name.Matthew Somerville2020-01-08-9/+17
| |/
* / Hide ‘provide extra information’ preamble when no visible fields are presentDave Arter2020-01-07-0/+53
|/ | | | | | | | | For categories that use the extra metadata fields to just show a notice message to the user, the ‘help the council fix the problem by providing extra information’ text was a bit out of place. This commit hides it unless there are actual UI elements also included in the markup. Fixes #2811.
* Clear any categories from user when unsetting from_bodyDave Arter2020-01-06-0/+24
| | | | This was most likely the cause of #2815.
* Fix 'all reports' link for users with categories but no from_bodyDave Arter2020-01-06-0/+13
| | | | | | | | | | | In the rare situation that a user has no from_body set but does have categories set in their extra metadata, the 'All reports' link would point to /my/inspector_redirect but this URL would 404 if the user did not have a from_body. This commit updates the template to use the same logic when generating the 'all reports' link, so users without from_body will never be sent to /my/inspector_redirect. Fixes #2815.
* Merge branch 'bexley-ooh'Matthew Somerville2019-12-19-1/+1
|\
| * Fix test issue where CSRF token contained number.Matthew Somerville2019-12-17-1/+1
| | | | | | | | Giving a false positive.
* | Check area IDs non-empty in inspector redirect.Matthew Somerville2019-12-17-1/+1
|/
* Store staff user when staff make anonymous report.Dave Arter2019-12-17-0/+25
| | | | | | If a staff user uses the anonymous button, it does not otherwise record which staff user did that; using Report As would store their user as the report's user.
* [Bromley] Try and make sure last name/title always present when sending.Matthew Somerville2019-12-16-0/+2
|
* [TfL] Server-side red route lookup for new report categoriesDave Arter2019-12-12-1/+1
| | | | | | | | | | | | | | | | | | | | This commit checks the RedRoutes WFS layer on tilma to determine if the point at which a new report is being made is on a TfL red route. The returned categories are then adjusted accordingly: - If on a red route, all TfL categories as well as borough categories specific to street cleaning are returned. - If not on a red route, all borough categories as well as TfL categories that don't require a red route are returned. - This category tweaking doesn't happen on the TfL cobrand, as the JS handles it by signposting users to fixmystreet.com for borough reports. Doing the lookup server side means the app always shows the right categories to the user and prevents them e.g. sending a borough flytipping report to TfL. Fixes https://github.com/mysociety/fixmystreet-commercial/issues/1716
* [TfL] Restrict reports on cobrand to post go-live.Matthew Somerville2019-12-09-8/+1
|
* [TfL] Remove Email::TfL send method as no longer neededDave Arter2019-12-09-33/+0
|
* [TfL] Mandate 2FA for non-internal-IP staff users.Matthew Somerville2019-12-09-0/+1
|
* Allow cobrands to skip 2FA requirement.Matthew Somerville2019-12-09-1/+19
|
* Record first time fixed/closed update sent to reporter in email.Matthew Somerville2019-12-09-0/+3
|
* Include areas in query param for inspector post-login redirect to all reportsDave Arter2019-12-09-0/+68
| | | | | Performs a proper redirect instead of detaching to /my/inspector_redirect so any request params from sign-in (e.g. password!) aren't carried through.
* Group categories on response template edit page, if cobrand allowsDave Arter2019-12-09-0/+45
|
* [UK Councils] Ensure response templates owned by other bodies aren’t visibleDave Arter2019-12-09-6/+71
|
* Switch to default-escaped in email templates.Matthew Somerville2019-12-09-3/+11
| | | | | We add a way to process a template with no auto-escaping, that can be used for the text parts of emails, and mark various HTML output as safe.
* Switch to default-escaped in templates.Matthew Somerville2019-12-09-1/+1
| | | | | | | This means any variable used in a template is automatically HTML-escaped, unless it is marked as safe either in code by using a SafeString, or in the template with the `mark_safe` function or the `safe` filter.
* Fix broken alert_type test.Matthew Somerville2019-12-08-12/+15
|
* [Peterborough] add title length restrictionStruan Donald2019-12-03-1/+27
| | | | Fixes mysociety/fixmystreet-freshdesk#102
* Merge branch 'csp-uk'Matthew Somerville2019-11-25-2/+29
|\
| * Add configuration for setting CSP header.Matthew Somerville2019-11-25-2/+29
| | | | | | | | | | | | This allows you to output a working Content-Security-Policy header, with optional third-party domains, by setting a new CONTENT_SECURITY_POLICY configuration option.
* | Merge branch 'qr-code-generator'Matthew Somerville2019-11-25-1/+0
|\ \
| * | Switch to internal QR code generator.Matthew Somerville2019-11-23-1/+0
| | |
* | | [Oxfordshire] re-enable inspector permissionsStruan Donald2019-11-22-27/+0
|/ / | | | | | | | | Re-enable the inspector permissions that were disabled at a cobrand level
* | Rotate session ID after successful login.Matthew Somerville2019-11-22-12/+11
| |
* | Replace use of FixMyStreet::App with DB in tests.Matthew Somerville2019-11-22-219/+208
|/
* Remove cached photos before updating db field.Matthew Somerville2019-11-18-13/+34
| | | | | If the photo field is updated first, then the cache removal doesn't think there are any photos to remove.
* Merge branch 'issues/freshdesk/98-staff-ignore-emergency-message'Struan Donald2019-11-15-0/+51
|\
| * allow staff to submit in disabled categoriesStruan Donald2019-11-15-0/+51
| | | | | | | | | | | | | | If a user belongs to a body override the disabled form check upon submission as mostly staff users can submit in those categories. Fixes mysociety/fixmystreet-freshdesk#98
* | Add cobrand-specific XSL to RSS feeds.Matthew Somerville2019-11-15-0/+17
|/
* Merge branch 'admin-auditing'Matthew Somerville2019-11-10-8/+62
|\
| * Add user admin log page.Matthew Somerville2019-11-08-5/+54
| |
| * Store a moderation history on admin report edit.Matthew Somerville2019-11-08-0/+7
| |
| * Add admin log entry for more objects and things.Matthew Somerville2019-11-08-1/+1
| | | | | | | | | | Namely templates, roles, bodies, categories, various user edits, and when using the inspect form and changing category.
| * Factor out admin template code to own controller.Matthew Somerville2019-11-08-2/+0
| |
* | Store email addresses report sent to on the reportMatthew Somerville2019-11-10-0/+3
|/
* Fix password reset on 2FA accounts again.Matthew Somerville2019-11-05-0/+5
| | | | | | Just after fixing it, 3d593bc68 broke it again, because it took anyone who must have 2FA switched on to the must-have-2FA sign up flow, even if they already had 2FA set up.
* Add optional enforced password expiry.Matthew Somerville2019-11-04-0/+28
|
* Record time of password change.Matthew Somerville2019-11-04-1/+3
|
* Merge branch '2fa-improvements'Matthew Somerville2019-10-31-148/+203
|\
| * If 2FA enforced, do it for an email login as well.Matthew Somerville2019-10-30-0/+34
| |
| * Fix password reset on 2FA accounts.Matthew Somerville2019-10-30-0/+23
| |
| * [UK] Mandate 2FA on superusers.Matthew Somerville2019-10-30-7/+13
| |