bd1328c189
FIX: show the wizard to developers too
2016-10-14 11:09:55 +02:00
f4f5524190
FEATURE: user API now contains scopes so permission is granular
...
previously we supported blanket read and write for user API, this
change amends it so we can define more limited scopes. A scope only
covers a few routes. You can not grant access to part of the site and
leave a large amount of the information hidden to API consumer.
2016-10-14 16:05:42 +11:00
9dd1f7b5b6
pull avatar, bio & location from Twitter
2016-10-13 10:49:51 +02:00
0328141e05
FIX: prevent creation of tags with invalid characters
2016-10-12 15:44:36 -04:00
41d2620d06
Add some styling to print redux version
2016-10-12 14:00:05 -03:00
89daa43754
FEATURE: remap emojis back for push notifications and desktop alerts
2016-10-11 13:03:48 +11:00
6031e692f0
Merge pull request #4366 from xfalcox/print
...
Print Support
2016-10-11 11:47:20 +11:00
aaec05e36a
FIX: stop asking for bio from facebook, it is deprecated
2016-10-11 10:56:07 +11:00
0f0b657182
Merge pull request #4447 from pmusaraj/approve_new_topics_setting
...
FEATURE: add "Approve new topics unless user level" setting
2016-10-11 10:14:28 +11:00
ea1f0683c8
Merge pull request #4477 from cpradio/watching-state-on-reply
...
FEATURE: Add notification level user preference when replying to a topic
2016-10-11 10:05:37 +11:00
8f68a95e56
FIX: trim leading & trailing whitespaces in admin user search
2016-10-10 16:18:57 +02:00
3e513f5c05
Merge pull request #4459 from vibol/master
...
FEATURE: sparkpost webhook
2016-10-10 17:17:17 +11:00
647ee46edf
FIX: don't stem the search term
...
Search for "canned" not working correctly and "butted", "ands" and many more :)
2016-10-07 12:40:57 +11:00
20c9c60dea
FEATURE: support multisite configuration for search:reindex task
2016-10-01 08:54:15 +02:00
6f1c31d777
Add notification level user preference when replying to a topic
2016-09-30 14:58:07 -04:00
4d8d5613e4
FEATURE: add min_trust_level_to_edit_post
...
add minimum trust level to edit post (default 0)
2016-10-01 02:12:27 +10:00
ccd75cf987
FIX: Ensure that the right locale exists before merging.
2016-09-30 15:01:42 +08:00
c3d60d5d1d
Merge remote-tracking branch 'upstream/master'
2016-09-29 02:12:05 -07:00
72ccb4e11d
FIX: Plugin "admin_js" translations bundle was not fetched.
2016-09-29 04:42:26 +08:00
5bdaaca848
Make it square!
2016-09-28 12:49:22 -03:00
f5746f490f
Uses higher resolution pictures when importing avatars from Facebook
2016-09-28 01:38:41 -03:00
34af73c7cb
FEATURE: sparkpost webhook
2016-09-26 22:13:34 -07:00
0229df4c73
Second review fixes
2016-09-26 20:46:55 -03:00
2a5a0bebb3
Adjusts from review
2016-09-26 20:46:55 -03:00
804019647e
Makes it possible to paginate on print page
2016-09-26 20:46:55 -03:00
9a46af59ad
FIX: TopicView were using Topic.relative_url instead of TopicView.relative_url on all methods.
2016-09-26 20:46:55 -03:00
70c68f0a7c
Open print dialog automatically
2016-09-26 20:44:50 -03:00
c12e533273
Feature: Adds a button to print a topic
2016-09-26 20:44:50 -03:00
df751ed6ec
Merge pull request #4457 from JaredReisinger/github-auth-with-email-whitelist
...
Add support for email whitelist/blacklist to GitHub auth
2016-09-23 09:49:14 +10:00
3c12dd6549
FIX: Consider lazyYT divs as links when extracting
2016-09-22 16:50:24 -04:00
0344388924
added tests and enabled queue when new setting is > 0
2016-09-22 14:51:36 -04:00
2ae7c47a3c
Add support for email whitelist/blacklist to GitHub auth
...
If a site is configured for GitHub logins, _**and**_ has an email domain
whitelist, it's possible to get in a state where a new user is locked to
a non-whitelist email (their GitHub primary) even though they have an
alternate email that's on the whitelist. In all cases, the GitHub
primary email is attempted first so that previously existing behavior
will be the default.
- Add whitelist/blacklist support to GithubAuthenticator (via
EmailValidator)
- Add multiple email support GithubAuthenticator
- Add test specs for GithubAuthenticator
- Add authenticator-agnostic "none of your email addresses are allowed"
error message.
2016-09-22 11:31:10 -07:00
adfa2cb09e
Version bump to v1.7.0.beta5
2016-09-22 12:44:10 -04:00
373004a00e
FIX: Incorrect color scheme name in admin after using wizard
2016-09-22 11:16:01 -04:00
9bba0f3288
FIX: Show "Categories" when you are viewing the categories pills
2016-09-22 09:52:19 -04:00
a95bb6006d
Show staff count on invites page, don't warn if you have 3
2016-09-22 09:52:19 -04:00
14bee641aa
Can choose categories or latest as homepage style
2016-09-22 09:52:19 -04:00
2a0443445b
New step to choose emoji set
2016-09-22 09:52:19 -04:00
2545c2ffa6
Add new welcome message step
2016-09-22 09:52:19 -04:00
9938f9bd67
Added images to the first and last step of the wizard
2016-09-22 09:52:19 -04:00
b0ee7930e8
Server side support for inviting as a moderator via the wizard
2016-09-22 09:52:19 -04:00
28cd49f02b
Split Logos and Icons into separate steps
2016-09-22 09:52:19 -04:00
4f9a7aa769
FIX: Prompt for the wizard for the first admin who logs in
2016-09-22 09:52:19 -04:00
644bcbc253
Make the site contact a drop down of admin users
2016-09-22 09:52:19 -04:00
74ed2e82ac
UX: Wiggle invalid form elements. Don't allow a site title of Discourse
2016-09-22 09:52:19 -04:00
29cf47cfb2
Track steps the user has completed, nag them to finish it.
2016-09-22 09:52:19 -04:00
ef84981e38
Invite Users step
2016-09-22 09:52:19 -04:00
35b767f6af
Company Name Step which updates the TOS
2016-09-22 09:52:19 -04:00
28b6c300a0
Clean up wizard updater API for better plugin use
2016-09-22 09:52:19 -04:00
e3640ee5f6
Privacy Step
2016-09-22 09:52:19 -04:00
af83c8dc14
Upload Logos Step
2016-09-22 09:52:19 -04:00
c94e6f1b96
Add locale step
2016-09-22 09:52:19 -04:00
3f6e3b9aff
Wizard - Color Scheme Step
2016-09-22 09:52:19 -04:00
9f12b571ef
Wizard: Server Side Validation + Finished Step
2016-09-22 09:52:19 -04:00
be1d74d207
Split out common functions into `discourse-common` module
2016-09-22 09:52:19 -04:00
3a4615c205
Wizard: Step 1
2016-09-22 09:48:58 -04:00
6070939daa
Support for other i18n bundles
2016-09-22 09:48:58 -04:00
9aecf4e6d1
Merge pull request #4455 from tgxworld/fix_category_logo_url
...
FIX: Form CDN URL client side instead.
2016-09-22 11:01:16 +02:00
b5d6d3c326
FIX: Make recover from tombstone script work for multisite.
2016-09-22 12:28:36 +08:00
d312c82474
Revert "FIX: wasn't able to update category's settings"
...
This reverts commit 282f9948cb
2016-09-22 11:29:44 +08:00
333d6f9f10
More improvements to restore from tombstone script.
2016-09-22 10:39:39 +08:00
13aff1f2f8
FEATURE: optionally delay the rebake_match task
2016-09-21 21:48:57 +05:30
1d4451db5d
Improve restore from tombstone script by not having to loop through all posts.
2016-09-21 18:01:59 +08:00
b62b6ba12c
Improve restore from tombstone rake task.
2016-09-21 17:47:27 +08:00
3af5b19002
Add rake task to restore missing uploads from tombstone.
2016-09-21 16:56:32 +08:00
7139538286
Fix typo.
2016-09-21 16:04:41 +08:00
5dbb3035d4
add "Approve new topics unless user level" setting
2016-09-19 14:07:15 -04:00
53e309fe3e
add missing flags emoji
2016-09-19 19:39:46 +02:00
d46084d328
update & optimize emojis
2016-09-19 13:43:53 +02:00
86d1bc7f47
new emoji:update rake task
2016-09-19 13:43:15 +02:00
8dc4329094
FEATURE: optionally get extra profile info from facebook
...
This feature requires the application be approved by facebook, so it is
default off
2016-09-19 16:14:11 +10:00
5b3cd3fac9
FEATURE: Import facebook avatars when logging in via facebook
...
FIX: warning about popup dimensions when using facebook login
Rules are:
- On account creation we always import
- If you already have an avatar uploaded, nothing is changed
- If you have no avatar uploaded, we upload from facebook on login
- If you have no avatar uploaded, we select facebook unless gravatar already selected
This also fixes SSO issues where on account creation accounts had missing avatar uploads
2016-09-19 15:10:23 +10:00
960620d91b
FIX: Respect the `acting_user` attribute on the PostValidator
2016-09-16 13:15:01 -04:00
64094954bc
FIX: Broken posting
2016-09-16 13:12:05 -04:00
0bf7519a8a
FIX: `tar --list` against a `.tar.gz` file takes too long.
...
This resulted in requests being blocked for an extended amount
of time when initializing the restorer.
2016-09-16 17:11:14 +08:00
68637f2164
FIX: Uploads being restored into the wrong directory for multisite.
2016-09-16 14:26:06 +08:00
f63a797e39
SECUIRTY: Escape input made to system calls.
2016-09-16 11:58:14 +08:00
8f36290c05
FIX: No need to list all the files.
2016-09-16 11:57:35 +08:00
8087cca54d
Version bump to v1.7.0.beta4
2016-09-13 12:23:51 -04:00
e46204d195
FIX: allow long words if they contain periods
2016-09-13 09:15:05 +05:30
2c9a47dda5
FIX: Validate the raw content of posts before enqueuing them
2016-09-12 12:26:49 -04:00
b381d84dd9
FIX: tag search should not be case sensitive
2016-09-09 16:55:26 -04:00
e78b7a243e
FIX: Don't enqueue posts if the user can't create them (ex: closed)
2016-09-09 12:15:56 -04:00
9609a47016
Ability to skip email validation via a plugin
2016-09-07 14:05:46 -04:00
610dd933a3
FEATURE: Support importing email from Twitter
2016-09-06 12:18:13 -04:00
1b2b142f30
FIX: Post without a topic can be destroyed.
2016-09-05 19:00:49 +08:00
aabb7a8592
FIX: DiscourseEvent should not be triggered from within the controller.
2016-09-05 15:58:04 +08:00
aa9decf6fd
Remove `DiscourseEvent.clear`.
2016-09-05 15:17:49 +08:00
59640bae3b
FIX: absolute URL for CDN should always be rooted with a protocol
2016-09-05 15:57:46 +10:00
e4b75f604c
FIX: Make clean up upload script a safer task to run.
2016-09-05 10:06:02 +08:00
76857e3f77
do not create new revision when remapping posts
2016-09-03 23:21:56 +05:30
be0fd5b4cc
FEATURE: allow user api key revocation for read only keys
2016-09-02 17:04:00 +10:00
df8d24734a
Regenerate missing optimized images for all dbs by default.
2016-09-02 13:06:31 +08:00
e4883725e6
Script to analyze uploads on a site.
2016-09-02 12:07:06 +08:00
82324db71a
Allow `uploads:missing` Rake task to be run for a single site.
2016-09-02 10:22:39 +08:00
2349ab5a51
`puts` not `putc`.
2016-08-29 10:30:10 +08:00
e57ed5223a
Fix rake task.
2016-08-26 15:46:42 +08:00
c4bf138d2c
FIX: incorrect error being raised
2016-08-26 10:39:13 +10:00
b1c8ede617
Merge pull request #4420 from tgxworld/prioritize_user_avataras
...
Prioritize user avatars when regenerating missing optimized images.
2016-08-26 07:58:58 +08:00
b3c65620f3
Version bump to v1.7.0.beta3
2016-08-25 12:01:06 -04:00
2f39293867
FIX: User enabled readonly mode was not working.
2016-08-25 23:31:59 +08:00
648c8d27a6
chomp before regex manifest
2016-08-25 17:15:29 +05:30
2448db4716
Prioritize user avatars when regenerating missing optimized images.
2016-08-25 18:29:52 +08:00
7e80810de1
FIX: Raise an error if metadata is not extracted correctly.
2016-08-25 17:20:32 +08:00
5da768b4fe
FIX: `find_each` uses `find_in_batches` which uses the primary key as the order.
2016-08-25 16:11:28 +08:00
50a8eb1810
Merge pull request #4405 from gdpelican/fix/intersection-pagination
...
FIX: Don't join on tags unnecessarily when matching all tags
2016-08-24 14:45:15 -04:00
7a81669c18
SECURITY: don't allow re-using the current password during password reset
2016-08-24 12:27:21 -04:00
79245a25a3
Explain the `skip_jobs` parameter
2016-08-24 11:06:14 -04:00
038eb6f645
FIX: translations with a symbol as key should also be overridable
2016-08-24 11:53:03 +02:00
3e4b02bbd4
FIX: Make sure constant reflects the right backup extenstion.
2016-08-24 10:28:23 +08:00
2cb4cb7b72
FIX: Don't enqueue jobs in a transaction
2016-08-23 16:07:59 -04:00
c3a3aff120
FEATURE: Support for a whitelist for embeddable host paths
2016-08-23 14:56:12 -04:00
f19232646f
Rescue all errors when backfilling shas for uploads.
2016-08-23 15:05:37 +08:00
2c1249f381
Remove monkey patch.
2016-08-23 12:04:53 +08:00
574b8fdf41
Allow backfilling of shas to complete.
2016-08-23 10:34:32 +08:00
a39929d12e
FEATURE: add opengraph and twitter meta tags on every page
2016-08-21 22:08:49 +05:30
3bd8b55fce
FEATURE: new rake task to change post ownership for a specific user
2016-08-20 20:43:16 +05:30
b4b96bf62b
FIX: Support searching your PMs via full page
2016-08-19 15:00:05 -04:00
a590f35982
FEATURE: allow changing post owners without creating post revision
2016-08-19 23:34:21 +05:30
386b8b8498
Don't join on tags unnecessarily when matching all tags
2016-08-19 10:37:32 -05:00
5222022842
Use another rake task to regenerate optimized images for multisite.
2016-08-19 15:52:09 +08:00
3141c179f7
REFACTOR: Get bucket name from S3Helper.
2016-08-19 14:08:37 +08:00
b09922b58a
we have to allow message bus for read clients
2016-08-19 15:22:52 +10:00
7195a103ab
FEATURE: digests choose topics you're watching or tracking first
2016-08-18 17:16:52 -04:00
3ea68f8f6c
tweak headers so they can be consumed
2016-08-18 14:38:33 +10:00
6d1d7b7c8f
UX: new /categories layout
2016-08-17 23:23:16 +02:00
d079f69b7b
FEATURE: add flair to avatars using new settings in the groups admin UI
2016-08-17 15:13:15 -04:00
6af4e6bd05
FEATURE: new rake task to remap posts matching a string
2016-08-17 14:08:46 +05:30
78bec20424
FIX: Check options and not just site settings.
2016-08-17 16:16:00 +08:00
dc4799dda2
handle posts:rebake_match task without type argument
2016-08-17 01:01:06 +05:30
054ee4dc55
FEATURE: new rake task to rebake posts using regex matching
2016-08-17 00:01:19 +05:30
7ff1f6cb9d
Allow custom bucket name for `FileStore::S3Store`.
2016-08-16 15:25:42 +08:00
416e7e0d1e
FEATURE: basic UI to view user api keys
2016-08-16 17:06:52 +10:00
11356fb9f4
Allow custom s3 options for `S3Helper`.
2016-08-16 11:13:59 +08:00
3b792054f2
Merge pull request #4387 from gdpelican/feature/tags-intersection
...
FEATURE: Tags intersection page
2016-08-15 16:24:29 -04:00
5849c345cc
FEATURE: digest emails will try to choose topics from your tracked and watched categories first
2016-08-15 16:16:04 -04:00
037e9bb7b8
Support any number of tag intersections
2016-08-15 15:30:17 -04:00
1916924304
Split options into another method so that plugins can use it.
2016-08-15 22:04:24 +08:00
205be0d044
Remove unused require.
2016-08-15 21:58:55 +08:00
0433163866
FEATURE: Support subfolders in `SiteSetting.s3_backup_bucket`.
2016-08-15 16:14:51 +08:00
fc095acaaa
Feature: User API key support (server side implementation)
...
- Supports throttled read and write
- No support for push yet, but data is captured about intent
2016-08-15 17:59:36 +10:00
aa5de3c40a
FEATURE: Support subfolders in S3 bucket name.
...
This commit also fixes a bug where s3 uploads are not
moved to a tombstone folder when removed.
2016-08-15 13:07:41 +08:00
3378ee223f
FIX: Incorrect path being passed to `S3Store#remove_file`.
2016-08-15 11:35:30 +08:00
ec8622a860
FIX: Count the records added, including duplicates
2016-08-12 17:18:12 -04:00
e14f3c802b
Cleanup
2016-08-12 15:56:56 -04:00
aef954784a
FIX: `nofollow` was being added during post processing when it shouldn't
2016-08-12 15:35:13 -04:00
7e73b933c7
First pass
2016-08-12 15:28:46 -04:00
11939fa8b9
PERF: Avoid some more count queries when fetching more results
2016-08-12 13:05:09 -04:00
b8d1079e68
Version bump to v1.7.0.beta2
2016-08-12 11:49:21 -04:00
42593562f5
Merge pull request #4384 from tgxworld/raise_error_when_method_not_implemented
...
FIX: Make sure we raise an error when method is not implemented.
2016-08-12 12:41:42 +08:00
8a792508e9
PERF: improve offset discovery query
2016-08-12 14:36:38 +10:00
1779a9634a
FIX: Make sure we raise an error when method is not implemented.
2016-08-12 11:43:57 +08:00
414388b94f
FIX: Allow disabling of sanitization (for email customiaztions)
2016-08-11 14:59:20 -04:00
431c211ec2
Bump search post id cache to 1 week
2016-08-11 14:06:07 -04:00
35922bf692
Use `unscoped` instead of `with_deleted`
2016-08-11 13:12:59 -04:00
7e165d031b
FIX: Short terms will be searched for if at least one is long enough
2016-08-11 11:53:14 -04:00
6075debc90
Add specs to hidding settings when shadowed by a global.
2016-08-11 16:04:45 +08:00
11afb20772
SECURITY: Escape HTML in filename.
2016-08-11 11:27:12 +08:00
6288d4c995
FIX: Revised post not updated correctly when merging posts.
2016-08-11 09:01:54 +08:00
4bb6f88181
FIX: Bump up backfill size to 50
2016-08-10 17:51:29 -04:00
c1cd9e0647
PERF: For estimates, we don't need to worry about deleted
2016-08-10 17:25:34 -04:00
fc311dbe3b
FEATURE: An option to search more recent posts for very large sites.
...
On very large forums searching posts can be slow, so this commit
introduces the ability to try and search only the most recent posts
first, and then going for a larger breadth search if there aren't
enough results.
Enable `search_prefer_recent_posts` and you can customize how many
recent posts to filter with `search_recent_posts_size`
2016-08-10 15:43:42 -04:00
e55e2aff94
FIX: FirstReplyByEmail badge wasn't granted
...
DEPRECATED: PostProcess badge trigger
2016-08-10 19:24:01 +02:00
d763ce08c0
FIX: Travis failure
2016-08-10 13:20:39 -04:00
cc366d5a60
FIX: Search in non-english should have a smaller minimum
2016-08-09 15:20:28 -04:00
28436a604a
FIX: Prevent tricking the search from ignoring minimum lengths
2016-08-09 14:49:46 -04:00
c1125c8649
PERF: Use simpler serializer for search, eager load post users
2016-08-09 14:49:46 -04:00
282f9948cb
FIX: wasn't able to update category's settings
2016-08-09 20:14:49 +02:00
5cc8bb535b
SECURITY: do cookie auth rate limiting earlier
2016-08-09 10:02:18 +10:00
51322a46b3
FEATURE: retry processing incoming emails on rate limit
2016-08-08 22:28:27 +02:00
5c06076b5c
FIX: strip blacklisted attachments before checking for empty email body
2016-08-08 22:20:33 +02:00
aa56100660
Failover messages really aren't warnings
...
"I'm going to do something entirely sane and reasonable" doesn't warrant a
warning-level log message. It's perfectly fine and reasonable to just log
that sort of thing at info level.
2016-08-08 16:02:23 +10:00
8539f02b5e
FIX: Backuper should return the full path.
2016-08-08 07:49:37 +08:00
823a699d41
Version bump to v1.7.0.beta1
2016-08-05 15:18:19 -04:00
f10c4682cd
FIX: muted tags showing in latest topic list
2016-08-04 11:54:48 -04:00
6827239444
Merge pull request #4360 from tgxworld/support_new_pg_dump_format
...
Changes to backup and restore
2016-08-04 10:58:42 +08:00
e92f5e4fbf
FEATURE: new email attachment blacklists site settings
2016-08-03 17:55:54 +02:00
35c13bca6c
Merge pull request #4363 from cpradio/version-link-shows-compare
...
FEATURE: Installed Version link shows GitHub Compare to branch being followed
2016-08-03 16:03:57 +02:00
323bd555c0
FIX: process all incoming email's destinations instead of only the first
2016-08-03 15:57:37 +02:00
b08ab829b8
added 'X-Auto-Response-Suppress' email header (props to elijah)
2016-08-03 11:02:07 +02:00
adc8336949
Make sure we track restore/backlog success logs as well.
2016-08-03 16:23:47 +08:00
b860d1b254
FIX: Ensure uploads directory exists.
2016-08-03 16:23:47 +08:00
0a942dbc73
FEATURE: Avoid creating an archive for database only backups.
2016-08-03 16:23:46 +08:00
1b89c2f0ef
FEATURE: Installed Version link shows GitHub Compare to branch being followed
2016-08-02 06:18:44 -04:00
3f4f1ee032
Merge pull request #4359 from tgxworld/backward_compatibility_for_backups_and_restores
...
FIX: Ensure that our restorer is backwards compatible.
2016-08-02 10:45:27 +08:00
441b98579a
FIX: Ensure that our restorer is backwards compatible.
2016-08-02 09:19:56 +08:00
ca4c939e9a
incoming mail is considered autogenerated when the subject match a list of 'out of office' keywords
2016-08-02 00:04:59 +02:00
7d0dc7cb7a
FIX: don't create staged user(s) when receiving a bounce (mailer-deamon begone)
2016-08-01 23:37:59 +02:00
9018de39ed
FEATURE: allow shipping bio markdown via SSO
...
- Also adds site setting for sso_overrides_bio to disable bio editing by end users
2016-08-01 15:29:28 +10:00
2891f230d1
SECURITY: Make sure uploaded_urls have corresponding upload records
2016-07-28 13:54:17 -04:00
dc1a830d3d
SECURITY: SQL Injection in Admin List Active Users
2016-07-28 11:42:06 -04:00
36ddb1787e
FEATURE: Add toggle topic visibility button in popup menu.
2016-07-28 16:57:04 +08:00
16a383ea1e
SECURITY: limit bad cookie auth attempts
...
- Also cleans up the _t cookie if it is invalid
2016-07-28 12:58:49 +10:00
ab68e0c9db
FEATURE: allow "developer" account flagging via developers table
...
This mechanism for flagging developer accounts will eventually replace
DISCOURSE_DEVELOPER_EMAILS
2016-07-28 10:14:06 +10:00
11172b7c2d
FIX: cropping GIF wasn't working
2016-07-27 18:48:02 +02:00
8cbd585e20
FEATURE: Allow staff users to merge posts.
2016-07-27 12:04:14 +08:00
2a4006fe0c
Add `YandexBot` to our list of crawlers
2016-07-26 13:21:37 -04:00
ce595189ff
Version bump to v1.6.0.beta12
2016-07-26 11:49:51 -04:00
76e57ddef3
FIX: Log errors in `ensure` block of restorer.
2016-07-26 10:24:01 +08:00
03aa13b2bb
FEATURE: Work with compressed version of `pg_dump` during backup and restore.
2016-07-26 10:24:01 +08:00
Régis Hanol
Sam
Neil Lalonde
Rafael dos Santos Silva
Arpit Jalan
cpradio
Guo Xiang Tan
Vibol Hou
Robin Ward
pmusaraj
Jared Reisinger
Vinoth Kannan
James Kiesel
Matt Palmer
Andre Pereira