Dave Bouvier
69ff4677bc
Escape anything that could be user input in mako templates, add markupsafe.escape to username and email in users API controller.
2014-12-10 11:31:21 -05:00
Dannon Baker
cae989cd5e
Update all template url_for invocations to explicitly specify a controller. This is preparation for removing the deprecated Routes mapper.explicit option.
2013-02-05 21:42:21 -05:00
James Taylor
6f08d51d15
removing webapp parameter from admin templates, fixing an import and some linting errors
2012-10-01 16:16:50 -04:00
Ross Lazarus
d53c3e984f
Backed out changeset 48bbe32beefe which introduced a whole bunch of unintended reversions from a broken hg repository
...
This is a backout of commit 5765
2011-07-06 09:44:56 +10:00
Ross Lazarus
86b55bb0c0
branch merge
2011-07-05 12:40:43 +10:00
Greg Von Kuster
b1a6e8c6ee
Enable the the grid helper and base grid templates to be used across webapps. Decouple the base controller from the model, controllers that subclass from the base contrller must now import a model. Eliminate the base controller from the community now that the base contrller can be used across webapps. Add a new admin controller grid to the community space. Move the Admin controller to ~/base/controller.py and subclass the 2 admin controller grids ( galaxy and community ) from it. Add the group components to the community.
2010-04-21 11:35:21 -04:00
Greg Von Kuster
77b1a84769
Move toward standardizing the way messages are displayed on Galaxy forms by using params 'message' and 'status' instead of 'msg' and 'messagetype'.
2010-04-02 16:06:43 -04:00
Greg Von Kuster
dc728ca16f
Handle user registration and login in the galaxy_main frame to ensure masthead. After registration or login, use javascript to redirect to the page the user was viewing when they attempted login. If javascript is disabled, a page will be displayed with links to the page they were visiting or the home page. Revamp functional tests to cover new behavior. Fix bugs where the username was not validated when a user registered, and add functional tests to cover. Fix a bug where the user's new session may have set it's history to the user's previous history, even if the history was deleted. Now a new history will be created for the current session instead. Add a new logout.mako template, and remove a create.mako template that was no longer used.
2010-04-02 15:00:53 -04:00
Greg Von Kuster
088b9cd030
Bug fixes and code cleanup for managing users, groups and roles.
2010-01-05 14:47:55 -05:00
Greg Von Kuster
00c3f84f40
Incorporate latest grid features into managing users, groups and roles from the admin view.
2009-11-09 23:00:55 -05:00
Ramkrishna Chakrabarty
07aafbd6c9
User information forms first pass.
...
- added a foreign key in the galaxy_user table to the form_values table
- separate user info page for viewing/editing user info
- user addresses added to user info page
2009-11-02 13:30:17 -05:00
Greg Von Kuster
936742c3c8
Two fixes - functional tests should pass.
2009-09-17 09:08:37 -04:00
Greg Von Kuster
3d6f94d323
Use a grid for admin user management, still needs some polishing, but a good start.
2009-09-16 14:06:14 -04:00
Greg Von Kuster
9520ca7f51
Can now optionally create a new group with the same name as a role when creating the role, along with more cleanup on the various users / groups / roles templates.
2009-04-28 09:44:35 -04:00
Greg Von Kuster
d400506970
A bunch of bug fixes, a few new features and functional tests fixes for the security and library stuff, getting closer, but a bit more work left.
2008-12-03 16:14:36 -05:00
Nate Coraor
439364d7ec
A couple missing url_fors.
2008-12-02 08:28:54 -05:00
Greg Von Kuster
ed90f0f683
Fixes and new features for data security and libraries, requires db schema change and new config setting.
...
- add ability for an admin to reset another user's password
- add ability for an admin user to delete another user's account ( requires config setting to display feature )
- add ability for an admin user to manage deleted users ( undelete / purge )
- more code cleanup in the admin controller
- several new functional tests and existing functional test improvements
SQL commands to alter db schema:
ALTER TABLE galaxy_user ADD COLUMN deleted BOOLEAN DEFAULT FALSE;
CREATE INDEX ix_galaxy_user_deleted ON galaxy_user USING btree (deleted);
ALTER TABLE galaxy_user ADD COLUMN purged BOOLEAN DEFAULT FALSE;
CREATE INDEX ix_galaxy_user_purged ON galaxy_user USING btree (purged);
New config setting:
# Can an admin user delete user accounts?
#allow_user_deletion = False
2008-11-28 15:32:15 -05:00
Dave Bouvier