]> git.openstreetmap.org Git - rails.git/history - app/controllers
Ensure authorization checks happen for all controller methods
[rails.git] / app / controllers /
2019-01-16 Andy AllanEnsure authorization checks happen for all controller...
2019-01-16 Andy AllanSkip authorization checks for the errors controller
2019-01-16 Tom HughesMerge remote-tracking branch 'upstream/pull/2116'
2019-01-16 Tom HughesMerge remote-tracking branch 'upstream/pull/2115'
2019-01-16 Andy AllanUse CanCanCan to control access to oauth controller...
2019-01-16 Andy AllanMark non-action methods as protected
2019-01-16 Andy AllanUse CanCanCan for nodes, ways, relations, old and api...
2019-01-09 Tom HughesMerge remote-tracking branch 'upstream/pull/2109'
2019-01-09 Tom HughesMerge remote-tracking branch 'upstream/pull/2108'
2019-01-09 Tom HughesMerge remote-tracking branch 'upstream/pull/2107'
2019-01-09 Tom HughesMerge remote-tracking branch 'upstream/pull/2106'
2019-01-09 Tom HughesMerge remote-tracking branch 'upstream/pull/2105'
2019-01-09 Andy AllanUse CanCanCan for oauth clients controller
2019-01-09 Andy AllanUse CanCanCan for messages controller
2019-01-09 Andy AllanUse a builder view for the capabilities call
2019-01-09 Andy AllanUse CanCanCan for changesets controller
2019-01-09 Andy AllanUse CanCanCan for traces controller
2019-01-09 Andy AllanUse CanCanCan for swf controller
2019-01-09 Andy AllanSkip authorization checks for amf controller
2019-01-09 Andy AllanAdd missing authorize_resource declaration to geocoder...
2019-01-09 Andy AllanUse CanCanCan for directions controller
2019-01-09 Andy AllanUse CanCanCan for browse controller
2019-01-02 Andy AllanUse CanCanCan for export controller
2019-01-02 Andy AllanUse CanCanCan for search controller
2018-12-31 Tom HughesAllow inline styling on pages that display the map
2018-12-12 Tom HughesAllow abilities that require no login for token based...
2018-12-12 Tom HughesMerge remote-tracking branch 'upstream/pull/2084'
2018-12-12 Tom HughesMerge remote-tracking branch 'upstream/pull/2083'
2018-12-12 Andy AllanRefactor users_controller to use CanCanCan for authoris...
2018-12-12 Andy AllanUse only token capabilities when a token is provided
2018-12-05 Tom HughesOnly check IP addresses for anonymous note comments
2018-11-28 Tom HughesMerge remote-tracking branch 'upstream/pull/2078'
2018-11-28 Andy AllanUse CanCanCan for user_roles auth
2018-11-28 Tom HughesMerge remote-tracking branch 'upstream/pull/2072'
2018-11-28 Tom HughesMerge remote-tracking branch 'upstream/pull/2075'
2018-11-28 Tom HughesMerge remote-tracking branch 'upstream/pull/2074'
2018-11-28 Andy AllanRemove the unused require_moderator filter
2018-11-28 Andy AllanUse CanCanCan for notes authorization
2018-11-28 Tom HughesMerge remote-tracking branch 'upstream/pull/2073'
2018-11-28 Andy AllanUse CanCanCan for changeset comments
2018-11-19 Tom HughesAllow connect_src to match all sites in Potlatch
2018-11-15 Tom HughesTake security policy URLs from the configuration file
2018-11-14 Tom HughesMerge remote-tracking branch 'upstream/pull/2060'
2018-11-14 Andy AllanRemove custom deny_access handlers
2018-11-14 Tom HughesMerge remote-tracking branch 'upstream/pull/2061'
2018-11-14 Tom HughesMerge remote-tracking branch 'upstream/pull/2058'
2018-11-14 Andy AllanPluralize changesets controller
2018-11-13 Tom HughesSkip CSRF verification for changeset comment actions
2018-11-08 Tom HughesAttempt to send pretty 403 errors to web browsers
2018-11-08 Tom HughesMerge remote-tracking branch 'upstream/pull/2051'
2018-11-08 Tom HughesMerge remote-tracking branch 'upstream/pull/2052'
2018-11-08 Tom HughesMerge remote-tracking branch 'upstream/pull/2050'
2018-11-07 Andy AllanPluralize diary entries controller
2018-11-07 Andy AllanPluralize old_ controllers
2018-11-07 Andy AllanPluralize nodes, ways and relations controllers
2018-11-07 Andy AllanUse CanCanCan for redaction authorizations
2018-11-07 Andy AllanMigrate UserBlocksController to use CanCanCan
2018-11-07 Andy AllanRename hide_comment and unhide_comment to destroy and...
2018-11-07 Andy AllanRename comments_feed to index
2018-11-07 Andy AllanRename comment to create
2018-11-07 Andy AllanSplit changeset comment handling into a changeset_comme...
2018-11-07 Tom HughesMerge remote-tracking branch 'upstream/pull/2049'
2018-11-07 Tom HughesAvoid ordering points from public and private traces
2018-11-04 Tom HughesMerge remote-tracking branch 'upstream/pull/2009'
2018-11-04 Tom HughesMerge remote-tracking branch 'upstream/pull/2042'
2018-11-03 Tom HughesMerge remote-tracking branch 'upstream/pull/2023'
2018-11-03 Tom HughesMerge remote-tracking branch 'upstream/pull/2038'
2018-10-31 Andy AllanUse deliver_later for all email sending
2018-10-31 Andy AllanMerge branch 'master' into cancancan
2018-10-29 Tom HughesUpdate translation keys for renaming of user to users
2018-10-24 Andy AllanCheck the oauth token and then use the capabilities...
2018-10-24 Andy AllanRework the default denied access handler to give differ...
2018-10-11 Tom HughesMerge remote-tracking branch 'upstream/pull/2018'
2018-10-11 Tom HughesTidy up notes#search
2018-10-11 Tom HughesUse "user" as user id parameter for notes searches
2018-10-11 Tom HughesMerge remote-tracking branch 'upstream/pull/1955'
2018-10-11 Tom HughesSuppress changeset pagination for inactive users
2018-10-11 ENT8RFix Rubocop issue
2018-10-10 ENT8RFix some issues and improve code
2018-10-10 Andy AllanRemove temporary development code
2018-10-10 Andy AllanMove issues and reports to authorization system
2018-10-10 Andy AllanFix typo in method name
2018-10-10 Andy AllanRefactor site#welcome to use abilities instead of requi...
2018-10-10 Andy AllanChange abilities based on upstream renamings
2018-10-10 Andy AllanMerge branch 'authz' of https://github.com/rubyforgood...
2018-10-09 ENT8RFix Rubocop issue
2018-10-09 ENT8RFix an issue where the query did not work if a display...
2018-10-09 ENT8RMerge branch 'master' into notes-search
2018-10-03 Tom HughesMerge remote-tracking branch 'upstream/pull/2010'
2018-10-03 Tom HughesMerge remote-tracking branch 'upstream/pull/2014'
2018-10-03 Tom HughesMerge remote-tracking branch 'upstream/pull/2012'
2018-10-03 Andy AllanRename user_controller to users_controller
2018-10-03 Andy AllanMerge branch 'master' into messages
2018-09-22 Tom HughesFix Style/NumericPredicate rubocop warnings
2018-09-22 Tom HughesFix Style/SafeNavigation rubocop warnings
2018-09-22 Tom HughesFix new rubocop warnings
2018-09-10 Tom HughesMerge remote-tracking branch 'upstream/pull/1987'
2018-09-10 Tom HughesMerge remote-tracking branch 'upstream/pull/1986'
2018-09-10 Tom HughesMerge remote-tracking branch 'upstream/pull/1985'
2018-09-10 Tom HughesMerge remote-tracking branch 'upstream/pull/1984'
next