aboutsummaryrefslogtreecommitdiffstats
path: root/spec/controllers
Commit message (Collapse)AuthorAgeLines
...
| * | Remove dependence on default public bodies.Louise Crow2014-09-22-16/+18
| | | | | | | | | | | | Seems like this could trip us up later. Use factories instead, they're more clearly associated with tests.
| * | Allow deletion of public body categories with associatied bodieslizconlan2014-09-22-9/+1
| | |
| * | Reinstate automatic loading of categories on get if no categories definedlizconlan2014-09-22-1/+6
| | |
| * | Enable admins to link public body categories to headingslizconlan2014-09-22-0/+14
| | |
| * | Restrict category_tag edits to empty public body categorieslizconlan2014-09-22-0/+18
| | |
| * | Basic category admin screenlizconlan2014-09-22-0/+275
| |/
* / Add an action to run the checksGareth Rees2014-09-25-0/+30
|/
* Whitelist UserController#signup params0.19.0.3hotfix/0.19.0.3Gareth Rees2014-09-09-0/+10
| | | | Protects from mass-assignment exploit attempts
* Merge branch 'issues/1181-destroy-external-request' into rails-3-developGareth Rees2014-08-21-0/+6
|\
| * Use different flash for fully_destroy external InfoRequestGareth Rees2014-08-18-0/+6
| | | | | | | | Uses a different flash message to avoid trying to fetch a non existent user record
* | Add honeypot spam protection to body update formGareth Rees2014-08-21-2/+16
|/ | | | | Intercepts the request and redirects to the homepage if the comment field is filled in on the public body update form.
* Use since_event_id to restrict query, not just data displayed.Louise Crow2014-08-11-1/+10
| | | | | Allow the same params (since_event_id, since_date) for both formats. There doesn't seem to be a particular reason not to treat them the same.
* whitespacelizconlan2014-07-28-436/+434
| | | | includes various code layout fixes
* Sending an invalid state value to add_correspondence now aborts the entire ↵lizconlan2014-07-28-29/+40
| | | | operation
* Refactor state update API, better error handlinglizconlan2014-07-28-10/+12
| | | | Filters; more 403s, fewer 500s; added logging; less duplication
* Extend add_correspondence API method to optionally accept a state paramlizconlan2014-07-28-79/+135
|
* New API method for updating request statelizconlan2014-07-28-277/+357
|
* Merge branch 'issues/1415-bulk-update-public-bodies' into rails-3-developGareth Rees2014-06-25-0/+17
|\
| * Add PublicBodyController#list_all_csv specsGareth Rees2014-06-06-0/+17
| | | | | | | | | | - Shouldn't include non-visible bodies - Shouldn't include internal admin bodies
* | Handle unhelpful stemmingGareth Rees2014-06-25-1/+1
| | | | | | | | | | | | | | Stemming returns 'bore' as the word to highlight which can't be matched in the original phrase. Also removes duplicates from the results
* | Use regex based highlightingGareth Rees2014-06-25-2/+1
| |
* | Rename XXX comments with TODO:Gareth Rees2014-06-10-20/+20
|/ | | | Picks these up in `rake notes` and adds semantic meaning
* Merge branch 'issues/1448-no-error-on-spam' into rails-3-developLouise Crow2014-06-02-0/+11
|\
| * Redirect to the frontpage rather than error on invalid paramsLouise Crow2014-06-02-0/+11
| | | | | | | | Fixes #1448.
* | Support simple searching of bodies by short_nameGareth Rees2014-05-28-0/+5
|/
* Merge branch 'issues/337-attachment-title' into rails-3-developGareth Rees2014-04-14-2/+1
|\
| * Use AttachmentToHTML to generate FoiAttachment#body_as_htmlGareth Rees2014-03-28-2/+1
| |
* | Merge branch 'issues/1317-holding-pen-spam' into rails-3-developGareth Rees2014-04-07-0/+91
|\ \
| * | Add AdminSpamAddressesController and UIGareth Rees2014-03-28-0/+91
| |/
* | Merge branch 'feature/1310-better-track-translation' into rails-3-developLouise Crow2014-04-04-3/+3
|\ \ | | | | | | | | | | | | Conflicts: spec/factories.rb
| * | Add notices for subscribing to something.Louise Crow2014-03-24-1/+1
| | | | | | | | | | | | | | | These notices are complete sentences, not composed on the fly, so should be easier to translate.
| * | Make track factory name a bit more specific.Louise Crow2014-03-24-2/+2
| | |
* | | Add honeypot spam protection to contact formGareth Rees2014-03-31-0/+17
| | | | | | | | | | | | | | | Intercepts the request and redirects to the homepage if the comment field is filled in on the contact form.
* | | Improve HelpControllerSpecGareth Rees2014-03-31-1/+5
| | | | | | | | | | | | | | | - Actually assert something when getting the pages - Use named route
* | | Tidy HelpControllerSpecGareth Rees2014-03-31-29/+41
| |/ |/|
* | Add specs for AdminUserController#modify_comment_visibilityGareth Rees2014-03-25-0/+69
| |
* | Use filter to reject if user is bannedGareth Rees2014-03-13-0/+13
| | | | | | | | | | | | | | | | | | Extract checking whether a user is banned from making Comments on an InfoRequest to a filter in CommentController. Removes responsibility from the #new method. Adds a missing spec.
* | Graceful failure of new_comment routeGareth Rees2014-03-13-9/+10
|/ | | | | | | | | | Fixes https://github.com/mysociety/alaveteli/issues/662 If /annotate/request/:url_title is accessed when comments are disabled an exception is incorrectly thrown. Conditionals should be used for control flow, so now the action redirects to the info_request path and displays a notice.
* Merge branch 'feature/batch-requests' into rails-3-developLouise Crow2014-01-29-35/+407
|\ | | | | | | | | | | Conflicts: config/general.yml-example spec/factories.rb
| * Specify sort on results to return in consistent order.Louise Crow2014-01-28-1/+1
| |
| * Show public body list when batch has not been sent.Louise Crow2013-12-04-8/+29
| |
| * Update notices for offline sending.Louise Crow2013-12-04-9/+1
| |
| * Display batch requests for user on 'my requests' pageLouise Crow2013-12-04-2/+4
| | | | | | | | This is the most rudimentary possible way to give them access to the batch request urls, pending #1239
| * Refactor specs to make adding batch changes easier.Louise Crow2013-12-04-30/+63
| |
| * Javascript enhancements.Louise Crow2013-12-04-27/+59
| | | | | | | | Add or remove all buttons, ajax search as you type.
| * Add a rudimentary view for an info request batch.Louise Crow2013-12-04-0/+32
| |
| * Notices for success and errors.Louise Crow2013-12-04-16/+34
| |
| * Add check for double submission.Louise Crow2013-12-04-0/+11
| |
| * Make method names for finding existing objects clearerLouise Crow2013-12-04-1/+1
| | | | | | | | | | They're not finding by the existing object, they're finding an existing object.
| * Simple code for the happy pathLouise Crow2013-12-04-0/+8
| | | | | | | | | | Create the batch and associate new requests with it, send the outgoing messages, and redirect to a page for the new batch.