| Commit message (Collapse) | Author | Age | Lines |
| |
|
|
|
|
|
|
| |
An authenticated API for public bodies. So far just one method
is implemented, which gives the details of a request in JSON
format.
|
|
|
|
|
|
| |
URLs such as http://localhost:3000/en/request/106.json should
be redirected to the corresponding named URL, including the
.json on the end.
|
|
|
|
|
|
| |
Backslashes are interpreted twice inside backticks, once by Ruby
and a second time by the shell, so you need twice as many as you
think you do.
|
|
|
|
|
|
|
|
|
|
|
| |
> 10) admin debug (https://secure.mysociety.org/admin/foi/debug) - "you
> are" - sentence that isn't finished
>
> 11) admin debug (https://secure.mysociety.org/admin/foi/debug) -
> versioning incorrect & URLs to github malformed:
> Alaveteli version: 0.5.2-297-g4ec7f6e
> Alaveteli branch: (no
> Alaveteli commit: 4ec7f6edbf2c00abc8464eafc889047f43533f90
|
| |
|
|
|
|
| |
When a request is hidden by an admin, allow the subject line to be specified.
|
|
|
|
|
|
|
| |
Make the "report request" button submit a POST rather than a GET
request. Also restrict this action to logged-in users.
Fixes #501.
|
|
|
|
|
|
|
| |
It’s weird that there’s so much code here that implicitly
assumes File.dirname(__FILE__) is an absolute path, because
really in general it very much is not! This assumption was
invalidated by the recent bundler-awareness changes.
|
|
|
|
| |
browser language; and make the tests pass.
|
|
|
|
| |
HTTP_REFERER for subsequent redirect.
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
* Change "email me about stuff" wording to "follow" throughout
* Introduce a new flag that the user can set, which controls if they get email alerts
* Add a new link to a "wall" for logged in users where they can see a feed of all the things they're following
|
|
|
|
| |
even if it's "unknown"
|
| |
|
|
|
|
| |
admin interface (requires adminbootstraptheme).
|
| |
|
|
|
|
|
|
| |
new "needs admin attention"-type state to InfoRequests, a flag indicating that a request has ever been marked as needing admin attention, and a controller method and route for setting this state & flag. Also adds the reason something needs admin attention to the subject of the email that gets sent to administrators.
Neeeds tests.
|
| |
|
|\ |
|
| |
| |
| |
| | |
wombleton:feature/440_sparkly_admin_css)
|
| |
| |
| |
| | |
controller when the method doesn't exist in Alaveteli code. See [this comment](https://github.com/sebbacon/alaveteli/issues/320#issuecomment-5711523) for discussion.
|
|/ |
|
|
|
|
|
|
| |
* Allow users with `super` admin level to use the administrative interface.
* Allow bootstrapping these users with an Emergency User over HTTP Basic Auth
* Introduce new `SKIP_ADMIN_AUTH` setting to allow all admin auth to be bypassed (used by mySociety)
|
|
|
|
| |
after they've "followed" search results. Fixes #487
|
|
|
|
| |
Fixes #454
|
|\ |
|
| | |
|
| |\
| | |
| | |
| | |
| | | |
Conflicts:
spec/controllers/request_controller_spec.rb
|
| | |
| | |
| | |
| | | |
Next step: making it asynchronous, e.g. with a queue of things to purge via a cron job.
|
| | |
| | |
| | |
| | | |
Closes #428
|
| | | |
|
| | |
| | |
| | |
| | | |
Fixes #421.
|
| |/
|/|
| |
| |
| | |
Add the facility to filter the public body feed by event type
using a query string parameter, e.g. event_type=sent.
|
| | |
|
|\ \ |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Previously the "log in as" function after 3b6e5a692b852a88f55b21a7210f60a6f7cfc24b
would attempt to log the admin user out before issuing the redirect. Unfortunately
this approach does not work on WhatDoTheyKnow, where the admin pages are served via
a different domain (secure.mysociety.org) and so do not share session information with
the rest of the site.
This commit changes it to mark the PostRedirect with circumstance == "login_as",
which signals the user controller to log out the previous user even if they are
an admin. In other words, the user is logged out on the main site rather than the
admin site, skirting this problem.
Closes #450.
|
| | |
| | |
| | |
| | | |
Just trailing whitespace & one comment.
|
| |/
| |
| |
| | |
Fixes #446. See issue for details.
|
| |
| |
| |
| | |
Fixes #446. See issue for details.
|
| |
| |
| |
| | |
Closes #428
|
| | |
|
|/
|
|
| |
Fixes #421.
|
|
|
|
|
|
| |
Don't change logged-in user from an admin when visiting a auto-login URL.
Closes #306.
|
|
|
|
|
| |
Include information about what the per-day limit is, and when the
user can next make a request. Fixes #412.
|
|
|
|
| |
Fixes #407.
|
|
|
|
|
|
|
| |
The variables last_request_id and last_body_id were not used
by the view, so it’s clearer to make them local variables so
it’s obvious from the controller code which values influence
the rendering.
|
|\
| |
| |
| |
| | |
Conflicts:
locale/app.pot
|