258 Commits

Author SHA1 Message Date
Oliver Günther 0dbb9f9e4b Allow configuring users table 2026-05-13 13:11:18 +02:00
Oliver Günther af53ecae32 Adapt specs 2026-05-13 13:11:17 +02:00
Oliver Günther c950be910e Convert custom filters on user administration to standard query 2026-05-08 13:34:21 +02:00
Oliver Günther 30b5e4e621 Force password change when sending out passwords via email 2026-05-04 09:08:48 +02:00
OpenProject Actions CI 6dc3935371 Merge branch 'release/17.3' into dev 2026-04-18 04:20:33 +00:00
Oliver Günther 8fafc2593b Fix visibility scope of groups in members filters
https://community.openproject.org/work_packages/74000
2026-04-17 11:34:36 +02:00
Henriette Darge d5a7da66ce Fix workday saving for users when disabling all workdays 2026-03-30 12:20:37 +02:00
Henriette Darge 7b93efc614 Add missing route for users controller to update reminders 2026-03-27 14:01:11 +01:00
Henriette Darge ee9140df34 Extend the exisisting Notifications::ShowPageComponent to be used for other users in the administration settings as well 2026-03-27 13:49:49 +01:00
Henriette Darge 3f0f3cfca0 Use reminders form component for the admin view as well and remove now outdated angular components 2026-03-26 15:15:29 +01:00
Klaus Zanders f2f2ecca44 Refactor views for user administration to be correctly in the users controller, add feature specs 2026-03-06 13:29:09 +01:00
OpenProject Actions CI ea04732363 Merge branch 'release/17.1' into dev 2026-02-26 04:18:06 +00:00
OpenProject Actions CI 72e8cc1e8f Merge branch 'release/17.0' into release/17.1 2026-02-25 13:22:11 +00:00
Klaus Zanders 3bd94efa49 Add check to not allow resend_invitation on admins by non-admins 2026-02-25 13:56:43 +01:00
Jan Sandbrink 485e09c357 Disable inputs in edit forms more consistently
The decision on which fields are writable has been moved into
the user's contract. Previously the fields in the My Account form were only
disabled in the frontend, but when changing the browser form, the user could
still update values. Now the contract has been updated to check the
authentication method as well, denying changes to the own name and email address.

Similarly when the contract prevents edits, this is also reflected in the admin
UI for users. It's not pretty, because there seems to be no formatting for disabled
text boxes in our old forms, but it still gives faster feedback than the
old forms, where you had to submit to see that a change to your own login
was rejected.

In the My Accounts form, this change leads to the curious case, where
an admin CAN change their own name in the My Account view, because admins
could do it in other forms as well. It's surprising, but consistent.

Additionally the behaviour has been harmonized across LDAP and other auth providers.
Editing the email address is now also forbidden in all cases for the user themselves.
2026-02-18 16:25:47 +01:00
Klaus Zanders 51159af334 Do not allow admins to delete themselves when they are the last admin 2026-02-13 15:17:39 +01:00
Klaus Zanders 0a2f3ecd18 Show links to manage user status for users with manage_user permission 2026-01-20 15:06:47 +01:00
Henriette Darge ab9d5f8d35 Remove outdated danger zone and replace it with a DangerDialog 2025-11-26 16:29:25 +01:00
Oliver Günther 0f1f0e62cb Reduce visibility of principals to common memberships or view_all_principals permission 2025-10-23 12:59:56 +02:00
Henriette Darge ee8452282a [63485] Remove show_local_breadcrumb and default_breadcrumb (#18663)
* add a new helper for breadcrumb in wiki page

* set page header in destroy page

* set page header in edit page

* set page header in history and rename and edit parent pages

* change toolbar items into page header items

* add new wiki action to sub header

* remove version edit page which is not in use any more

* add export as a menu item of the header

* fix rubocup errors

* fix failing tests

* replace page header in annotate page

* replace page header in diff page

* add page header in select menu page

* fix rubocup errors

* fix errors on rename test

* fix errors on selecting items from toolbar

* fix errors on tests for child pages

* set correct permission for configure menu item

* replace page header in summary page

* replace page header in summary details page

* edit docs of sub header

* add page header in wiki new page

* remove controller and a route for edit method

* undo changes for docs of sub header

* extract header in show page into a new component

* use helper method in header component

* add wiki module to the breadcrumb

* rename page header component for wiki page

* simplify how lock and lock implemented

* extract sub header

* remove wiki title from header of history page

* fix page header in new page

* use page.find_test_selector in test

* fix failing test for summary page

* fix failing test for wiki child pages

* change the summary test

* use test selector for page header title

* undo changes for activate user in admin

* use test selector in adding editing history test

* use test selector in attachment upload test

* use test selector in child pages tests

* use test selector in wiki menu items tests

* change test selector for breadcrumbs

* extract conditions to show edit button into a method

* extract conditions to show rollback action menu item into a method

* extract conditions to show create button into a method

* fix duplicated code in test

* Remove outdated `show_local_breadcrumb` method which is replaced by the Primer::PageHeader breadcrumb

* Remove `default_breadcrumb` method as it serves no prupose any more

* Remove the old breadcrumb and its hook completely

* remove breadcrumbs path from rename

* fix translations errors in storages

* undo changes on translations

* remove default breadcrumbs in time tracking controller

---------

Co-authored-by: Behrokh Satarnejad <b.satarnejad@openproject.com>
Co-authored-by: Behrokh Satarnejad <62008897+bsatarnejad@users.noreply.github.com>
2025-04-23 10:40:43 +02:00
Dombi Attila 10dc5538a2 [#63386] Use rescue_from ActiveRecord::RecordNotFound
https://community.openproject.org/work_packages/63386
2025-04-14 13:44:28 +03:00
Alexander Brandon Coles 78cbbaccc4 Correct/ignore Rubocop offenses in UsersController 2025-02-13 15:12:51 -03:00
Oliver Günther b65e2cb514 Allow redirecting back to global 2025-02-13 13:16:54 +01:00
Oliver Günther 5e48ad2927 Lint 2024-11-05 17:13:30 +01:00
Oliver Günther 58de8c8e1d Fix redirects, render with turbo in users controller 2024-10-11 08:42:59 +02:00
Oliver Günther fa99c5bef6 Render with status: :unprocessable_entity 2024-10-11 08:42:58 +02:00
Behrokh Satarnejad 6c6ba1e08a [53807] Update PageHeaders & SubHeaders in the My account pages (#16141)
* replace page header in profile, settings,sessions, password pages

* replace page header in user email reminder page

* replace page header in user access token page

* fix layout error on access token

* add page header component to two factor authentication page

* remove toolbar for email reminder

* use page header component in change avatar page

* unify menu entry and page header title for avatar page

* add page header for delete account pages

* add users and permissions to the breadcrumb of delete account from admin side

* create a separate component for page header in delete account page

* use page header component in n notifications settings and remove toolbar component in notification settings component and reminder settings component

* add page header component to 2fa new page

* add page header component to 2fa new pages and chnage the name of delete account page header component

* change user path in breadcrumb of delete account page

* remove show_toolbar of the component from reminders pages

* move page header to the top of the page in 2fa devices page

* remove the container element from access token page

* remove new type html and use action menu instead

* add description to menu item and change descriptions and titles

* Remove inline create button at the bottom of table

* fix failing specs

* fix failing spec

* fix rubocop error

* undo removing the page that is used for creating a new 2fa device in a state that is enforced by admin

* fix specs for selecting a device from action menu

* set the correct breadcrumb for add a new device

* undo changes for tests of forced registration

* undo changes for tests of new method when reverting deleted file

* add page header to the 2fa add new device page

* change html title in the 2fa add new device page

* change breadcrumbs in 2fa new device page

* use test selector helper in specs

* add page header to backup codes page

* shorten title an breadcrumb in backup code page

* remove closed tag
2024-08-14 10:30:16 +02:00
Ivan Kuchin 4911b8a149 remove years from copyrights (except for COPYRIGHT file) 2024-07-31 15:02:49 +02:00
Henriette Darge 0fc94fa9e8 Introduce PageHeader in Administration / Users 2024-07-15 08:40:33 +02:00
Oliver Günther a690c196f2 Fix back link in activities 2024-07-01 14:59:08 +02:00
Oliver Günther 121d1b73bb Primerize
Use inline erb

Primerize expandable list
2024-07-01 09:13:54 +02:00
Kabiru Mwenja 31ceb4e422 Merge branch 'release/14.2' into dev 2024-06-12 19:32:36 +03:00
ulferts fdbd6b6d5a forcing to specify allowed actions when forfeiting authorization check 2024-06-11 10:29:22 +02:00
Klaus Zanders 74d9b85bd7 Fix rubocop issues 2024-06-11 09:55:39 +02:00
Oliver Günther a60becaf10 Add groups to user profile 2024-06-11 07:38:14 +02:00
ulferts ed5a162230 allow actions to be called on those not using default authorization before_actions 2024-06-07 16:55:40 +02:00
ulferts 3b2121f733 Revert "Merge remote-tracking branch 'origin/release/13.4' into dev"
This reverts commit 40b2bbeb09, reversing
changes made to b4c6cb17cc.
2024-03-21 11:31:17 +01:00
Ivan Kuchin 7787e457a3 Revert "Merge branch 'dev' into release/13.4"
This reverts commit a901541269, reversing
changes made to e573ca00b7.
2024-03-20 20:19:08 +01:00
Ivan Kuchin 9e4934cd0a change quotes using rubocop --only Style/StringLiterals,Style/QuotedSymbols -a 2024-03-20 18:05:22 +01:00
Henriette Darge 89eeb82251 [36521] Saving changes to user profile after handling error message leads to user profile instead of edit user page (#15018)
* instead of redirecting to user profile page, stay on edit page

* Adapt test

---------

Co-authored-by: bsatarnejad <b.satarnejad@gmail.com>
2024-03-18 16:50:09 +01:00
Christophe Bliard c795874f7f Update copyright year for 2024
command used: `rg -l 'Copyright \(C\) 2012-202\d the OpenProject' | xargs -n 100 sed -i -r 's/Copyright \(C\) 2012-202. the OpenProject/Copyright (C) 2012-2024 the OpenProject/'`
2024-01-02 16:23:54 +01:00
ulferts 60ed64cd04 use error_messages_for method now 2023-10-24 12:06:36 +02:00
Klaus Zanders 2d5f5f3a26 Replace allowed_to_globally? -> allowed_globally? for global permission checks 2023-10-23 15:05:37 +02:00
Christophe Bliard f169fa32e9 refactor: remove useless return
Making rubocop happier every time.
2023-09-25 11:32:08 +02:00
ulferts 41f547cd5c backport Project.allowed_to performance improvements to 13.0 2023-09-21 16:45:49 +02:00
Klaus Zanders adccd2164f Do not show link to Users list, when you cannot access it 2023-07-27 12:32:21 +02:00
Klaus Zanders 0cd2152b31 Add breadcrumb toolbar to the show page and render in Admin Layout when possible 2023-07-27 12:19:54 +02:00
Klaus Zanders b292285263 Add specs for correct redirect path after User#create and User#resend_invitation 2023-07-20 08:59:22 +02:00
Klaus Zanders a8e57970f6 Implement invite button on the user's profile 2023-07-20 08:59:20 +02:00
Oliver Günther befab7b4af Add "My activity" link to account menu
https://community.openproject.org/work_packages/48624
2023-06-20 22:55:00 +02:00