aboutsummaryrefslogtreecommitdiffstats
path: root/app/controllers
Commit message (Collapse)AuthorAgeLines
* Reorder methodsRobin Houston2012-06-06-4/+4
|
* Authenticated APIRobin Houston2012-06-06-0/+46
| | | | | | An authenticated API for public bodies. So far just one method is implemented, which gives the details of a request in JSON format.
* Redirect numeric request URLs in JSON mode tooRobin Houston2012-06-06-1/+1
| | | | | | URLs such as http://localhost:3000/en/request/106.json should be redirected to the corresponding named URL, including the .json on the end.
* Silly syntax bugRobin Houston2012-06-04-2/+2
| | | | | | Backslashes are interpreted twice inside backticks, once by Ruby and a second time by the shell, so you need twice as many as you think you do.
* Fix admin debug methodRobin Houston2012-06-04-6/+4
| | | | | | | | | | | > 10) admin debug (https://secure.mysociety.org/admin/foi/debug) - "you > are" - sentence that isn't finished > > 11) admin debug (https://secure.mysociety.org/admin/foi/debug) - > versioning incorrect & URLs to github malformed: > Alaveteli version: 0.5.2-297-g4ec7f6e > Alaveteli branch: (no > Alaveteli commit: 4ec7f6edbf2c00abc8464eafc889047f43533f90
* Log an event when a request is hiddenRobin Houston2012-06-04-1/+9
|
* Allow subject to be specified when request hiddenRobin Houston2012-06-03-1/+2
| | | | When a request is hidden by an admin, allow the subject line to be specified.
* Prevent spiders from reporting requestsRobin Houston2012-06-03-0/+6
| | | | | | | Make the "report request" button submit a POST rather than a GET request. Also restrict this action to logged-in users. Fixes #501.
* File.dirname(__FILE__) is not necessarily absoluteRobin Houston2012-06-03-2/+2
| | | | | | | It’s weird that there’s so much code here that implicitly assumes File.dirname(__FILE__) is an absolute path, because really in general it very much is not! This assumption was invalidated by the recent bundler-awareness changes.
* Make the logic that tells you about other countries' Alavetelis prefer the ↵Seb Bacon2012-05-30-0/+3
| | | | browser language; and make the tests pass.
* Test for user turning email alerts off. Also includes a fix not to rely on ↵Seb Bacon2012-05-30-1/+1
| | | | HTTP_REFERER for subsequent redirect.
* Make it possible to view other people's activities on their own walls.Seb Bacon2012-05-30-5/+5
|
* Fix typo that broke one of the "follow" informational messagesSeb Bacon2012-05-30-1/+1
|
* Limit the number of results returned on the wallSeb Bacon2012-05-30-2/+2
|
* Support "following" functionality:Seb Bacon2012-05-30-4/+65
| | | | | | * Change "email me about stuff" wording to "follow" throughout * Introduce a new flag that the user can set, which controls if they get email alerts * Add a new link to a "wall" for logged in users where they can see a feed of all the things they're following
* Always supply admins with reason why a request was sent to the holding pen, ↵Seb Bacon2012-05-29-1/+1
| | | | even if it's "unknown"
* Allow messages to be redelivered to more than one request. Closes #442Seb Bacon2012-05-29-25/+29
|
* Support easy hiding of requests for admins. Currently not exposed in core ↵Seb Bacon2012-05-25-0/+40
| | | | admin interface (requires adminbootstraptheme).
* Test for reporting functionalitySeb Bacon2012-05-24-1/+3
|
* First stab at new feature. Adds new box in sidebar for reporting an issue, a ↵Seb Bacon2012-05-24-0/+12
| | | | | | new "needs admin attention"-type state to InfoRequests, a flag indicating that a request has ever been marked as needing admin attention, and a controller method and route for setting this state & flag. Also adds the reason something needs admin attention to the subject of the email that gets sent to administrators. Neeeds tests.
* Show Alaveteli version number on debug page (using last git tag in history)Seb Bacon2012-05-23-0/+1
|
* Merge branch 'develop' into feature/fix-404-in-themesSeb Bacon2012-05-15-163/+163
|\
| * Remove trailing whitespace (to make a cleaner forthcoming merge with ↵Seb Bacon2012-05-15-163/+163
| | | | | | | | wombleton:feature/440_sparkly_admin_css)
* | Add a comment to explain why we're calling `set_view_paths` in the ↵Seb Bacon2012-05-15-2/+7
| | | | | | | | controller when the method doesn't exist in Alaveteli code. See [this comment](https://github.com/sebbacon/alaveteli/issues/320#issuecomment-5711523) for discussion.
* | Allow themes to effect the design of error pagesSeb Bacon2012-05-15-0/+7
|/
* Improve administrative user account support:Seb Bacon2012-05-14-14/+31
| | | | | | * Allow users with `super` admin level to use the administrative interface. * Allow bootstrapping these users with an Emergency User over HTTP Basic Auth * Introduce new `SKIP_ADMIN_AUTH` setting to allow all admin auth to be bypassed (used by mySociety)
* Redirect people to more user-friendly search results page (where possible) ↵Seb Bacon2012-05-11-1/+17
| | | | after they've "followed" search results. Fixes #487
* Don't cache results from pages with different locales using the same key. ↵Seb Bacon2012-05-04-1/+1
| | | | Fixes #454
* Merge branch 'develop' of github.com:sebbacon/alaveteli into developRobin Houston2012-05-03-10/+3
|\
| * More changes and refactoring to make purges work.Seb Bacon2012-04-20-10/+1
| |
| * Merge branch 'develop' into purge-requestsSeb Bacon2012-04-19-10/+18
| |\ | | | | | | | | | | | | Conflicts: spec/controllers/request_controller_spec.rb
| * | first stab at sending PURGE requests to upstream varnish for request pages. ↵Seb Bacon2012-03-13-0/+2
| | | | | | | | | | | | Next step: making it asynchronous, e.g. with a queue of things to purge via a cron job.
| * | Set a "Content-Disposition: attachment" header when downloading files. ↵Seb Bacon2012-03-13-1/+2
| | | | | | | | | | | | Closes #428
| * | Trailing whitespaceRobin Houston2012-03-13-1/+1
| | |
| * | Make /similar/request/NONESUCH a 404 not 500 errorRobin Houston2012-03-13-1/+3
| | | | | | | | | | | | Fixes #421.
* | | Filter public body tracks by event typeRobin Houston2012-05-03-2/+6
| |/ |/| | | | | | | Add the facility to filter the public body feed by event type using a query string parameter, e.g. event_type=sent.
* | use Rails.root, not RAILS_ROOTJames McKinney2012-04-02-1/+1
| |
* | Merge branch 'wdtk' into developRobin Houston2012-03-20-8/+9
|\ \
| * | Fix the "log in as" functionRobin Houston2012-03-20-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously the "log in as" function after 3b6e5a692b852a88f55b21a7210f60a6f7cfc24b would attempt to log the admin user out before issuing the redirect. Unfortunately this approach does not work on WhatDoTheyKnow, where the admin pages are served via a different domain (secure.mysociety.org) and so do not share session information with the rest of the site. This commit changes it to mark the PostRedirect with circumstance == "login_as", which signals the user controller to log out the previous user even if they are an admin. In other words, the user is logged out on the main site rather than the admin site, skirting this problem. Closes #450.
| * | No code changesRobin Houston2012-03-13-3/+5
| | | | | | | | | | | | Just trailing whitespace & one comment.
| * | Admin users clicking confirmation linksRobin Houston2012-03-13-1/+8
| |/ | | | | | | Fixes #446. See issue for details.
* | Admin users clicking confirmation linksRobin Houston2012-03-13-1/+8
| | | | | | | | Fixes #446. See issue for details.
* | Set a "Content-Disposition: attachment" header when downloading files. ↵Seb Bacon2012-02-15-1/+2
| | | | | | | | Closes #428
* | Trailing whitespaceRobin Houston2012-02-10-1/+1
| |
* | Make /similar/request/NONESUCH a 404 not 500 errorRobin Houston2012-02-10-1/+3
|/ | | | Fixes #421.
* Let admin users use auto-login URLsRobin Houston2012-02-06-3/+6
| | | | | | Don't change logged-in user from an admin when visiting a auto-login URL. Closes #306.
* Change wording of rate-limited pageRobin Houston2012-02-05-0/+2
| | | | | Include information about what the per-day limit is, and when the user can next make a request. Fixes #412.
* Return 404 for /feed/user/no_such_userRobin Houston2012-02-03-0/+1
| | | | Fixes #407.
* Make variables localRobin Houston2012-02-03-6/+6
| | | | | | | The variables last_request_id and last_body_id were not used by the view, so it’s clearer to make them local variables so it’s obvious from the controller code which values influence the rendering.
* Merge branch 'wdtk' into release/0.5Robin Houston2012-02-01-6/+27
|\ | | | | | | | | Conflicts: locale/app.pot