340 Commits

Author	SHA1	Message	Date
Neil Lalonde	504bcf4550	SECURITY: signup without verified email using Google auth	2017-10-16 15:23:32 -04:00
Guo Xiang Tan	69dc8188e3	UX: Don't send emails for discobot notifications.	2017-06-14 21:09:47 +09:00
Sam	a7e65d98a9	FIX: mutex to avoid race condition with double notify	2017-05-26 17:04:40 -04:00
Guo Xiang Tan	238a156300	FIX: TopicTimestampChanger should not allow timestamps in the future.	2017-05-22 16:03:49 +08:00
Guo Xiang Tan	4382a0bb07	Rename PostTimestampChanger -> TopicTimestampChanger.	2017-05-22 15:01:33 +08:00
Neil Lalonde	7821400141	FEATURE: staff can set a timer to remind them about a topic	2017-05-16 14:49:50 -04:00
Sam	e1dd543a93	FEATURE: allow users to select theme on single device	2017-05-15 12:48:16 -04:00
Sam	2d96a0785d	FEATURE: theme selection is now global per-user	2017-05-12 12:41:34 -04:00
Neil Lalonde	55b61e9bea	rename topic_status_update to topic_timer	2017-05-11 18:27:53 -04:00
Robin Ward	f05f1a24d3	Change Anniversary badge to be multiple grant, once per year	2017-04-28 14:22:54 -04:00
Sam	a3e8c3cd7b	FEATURE: Native theme support ... This feature introduces the concept of themes. Themes are an evolution of site customizations. Themes introduce two very big conceptual changes: - A theme may include other "child themes", children can include grand children and so on. - A theme may specify a color scheme The change does away with the idea of "enabled" color schemes. It also adds a bunch of big niceties like - You can source a theme from a git repo - History for themes is much improved - You can only have a single enabled theme. Themes can be selected by users, if you opt for it. On a technical level this change comes with a whole bunch of goodies - All CSS is now compiled using a custom pipeline that uses libsass see /lib/stylesheet - There is a single pipeline for css compilation (in the past we used one for customizations and another one for the rest of the app - The stylesheet pipeline is now divorced of sprockets, there is no reliance on sprockets for CSS bundling - CSS is generated with source maps everywhere (including themes) this makes debugging much easier - Our "live reloader" is smarter and avoid a flash of unstyled content we run a file watcher in "puma" in dev so you no longer need to run rake autospec to watch for CSS changes	2017-04-12 10:53:49 -04:00
Robin Ward	40cee37bcc	FIX: Don't insert topic status messages unless the status changes	2017-04-07 17:10:43 -04:00
Guo Xiang Tan	5943543ec3	FIX: Improve checks for non-human users.	2017-04-06 11:29:34 +08:00
Sam Saffron	cd39049262	SECURITY: do not send push notifications to suspended users	2017-04-05 08:28:24 -04:00
Guo Xiang Tan	aca972c08b	FIX: Skip validations when updating group mentions.	2017-04-04 14:13:18 +08:00
Guo Xiang Tan	f4758a4c4d	FEATURE: Allow admins to schedule a topic to be published in the future.	2017-04-04 11:16:05 +08:00
Guo Xiang Tan	34b7bee568	FEATURE: Allow admin to auto reopen at topic. ... * This commit also introduces a `TopicStatusUpdate` model to support other forms of deferred topic status update in the future.	2017-03-31 11:14:18 +08:00
Neil Lalonde	9ae8813a53	FIX: admin user page should show count of all posts, including private messages, so admins can delete them. This bug was making it impossible to delete users.	2017-03-17 17:01:45 -04:00
Guo Xiang Tan	bf78c228f4	FIX: User created web hook being enqueued before record has been saved. ... * Improve web hook tests as well.	2017-03-16 14:44:09 +08:00
Sam	16593ae8bf	FEATURE: log reason staff auto blocks a user	2017-03-10 15:45:48 -05:00
Arpit Jalan	d5bcc70e9c	FIX: grant trust level when bulk adding users to group	2017-03-06 14:39:53 +05:30
Neil Lalonde	262016604d	FEATURE: each category can control how many topics to show on categories page	2017-03-01 15:12:57 -05:00
Arpit Jalan	e27b1b98d1	FIX: handle new user when logging name change	2017-03-01 13:43:57 +05:30
Guo Xiang Tan	76dd6933d2	Revert "Revert "Revert "SECURITY: Ensure oAuth authenticated email is the same as created user's email.""" ... This reverts commit e6d75f6844. This is why we should not be pushing directly to master.	2017-03-01 10:16:59 +08:00
Guo Xiang Tan	e6d75f6844	Revert "Revert "SECURITY: Ensure oAuth authenticated email is the same as created user's email."" ... This reverts commit 0e3def7d2b.	2017-02-28 11:27:14 +08:00
Arpit Jalan	6661cebff8	FIX: do not log duplicate username changes	2017-02-28 01:32:00 +05:30
Arpit Jalan	b32d3d66e5	FEATURE: log all username and name changes	2017-02-28 00:23:27 +05:30
Robin Ward	0e3def7d2b	Revert "SECURITY: Ensure oAuth authenticated email is the same as created user's email." ... This reverts commit 1060239e2d.	2017-02-27 13:19:26 -05:00
Guo Xiang Tan	1060239e2d	SECURITY: Ensure oAuth authenticated email is the same as created user's email.	2017-02-24 13:13:10 +08:00
Guo Xiang Tan	0847b4258a	Revert "SECURITY: Ensure that user has been authenticated." ... This reverts commit fbe51d68a7. Changing the commit message to correctly reflect what we're actually fixing.	2017-02-24 13:12:29 +08:00
Guo Xiang Tan	fbe51d68a7	SECURITY: Ensure that user has been authenticated.	2017-02-24 10:47:48 +08:00
Robin Ward	496682c442	Merge pull request #4662 from tgxworld/fix_localized_group_name_change ... Fix localized group name change	2017-01-26 10:50:00 -05:00
Neil Lalonde	6b93b09404	FIX: when blocking a user results in hiding their posts, only hide posts made in the last 24 hours	2017-01-19 15:56:22 -05:00
Guo Xiang Tan	706b4f6b9f	FEATURE: Remap group mentions when group name has been changed.	2017-01-18 13:39:34 +08:00
Régis Hanol	fbf9172db8	FIX: log backups download/destroy staff action ... FIX: clean up junk left by the specs RENAME: 'backup_operation' to 'backup_create' to match other backup log types	2017-01-16 19:53:31 +01:00
Guo Xiang Tan	515f50e42e	FEATURE: Log admin action when readonly mode is changed.	2017-01-12 09:41:02 +08:00
Robin Ward	6c3426d266	Let's not notify for trust levels on Staff, either	2017-01-11 11:25:04 -05:00
Neil Lalonde	98bd58df61	Don't show email of deleted users in staff action logs	2017-01-10 17:25:36 -05:00
Neil Lalonde	fc0a0a76a4	Add more info in staff action logs for blocking a user, and add logging for lock trust level, activate, and deactive user	2017-01-10 17:25:36 -05:00
Robin Ward	7341b0d03c	Don't give notifications to admins for trust level notifications	2017-01-10 12:18:48 -05:00
Guo Xiang Tan	d10fe51b72	Fix broken specs since all urls will be oneboxed.	2017-01-06 10:05:51 +08:00
Régis Hanol	cbcb9363f4	fix the build	2017-01-04 14:23:21 +01:00
Sam	c531f4ded5	remove rails-observers ... Rails yanked out observers many many years ago, instead the functionality was yanked out to a gem that is very lightly maintained. For example: if we want to upgrade to rails 5 there is no published gem Internally the usage of observers had quite a few problem. The series of refactors renamed a bunch of classes to give us more clarity and removed some magic.	2016-12-22 16:46:53 +11:00
Sam	019f1a1d06	UserEmailObserver is now removed ... no big surprises here was pretty straightforward after_commit semantics sure are weird though	2016-12-22 16:46:53 +11:00
Sam	2f6a4cc6de	remove UserActionObserver, replace with after_save and service ... interestingly there was some left over dead code from when stars existed in the topic_users table	2016-12-22 16:46:53 +11:00
Sam	0a78ae739d	Remove SearchObserver, aim is to remove all observers ... rails-observers gem is mostly unmaintained and is a pain to carry forward new implementation contains significantly less magic as a bonus	2016-12-22 13:13:14 +11:00
Guo Xiang Tan	69330f8bc2	Add user_updated event to webhooks.	2016-12-13 11:26:26 +08:00
Guo Xiang Tan	05f55dbc10	FEATURE: Group logs.	2016-12-12 17:29:54 +08:00
Régis Hanol	6edd3c347c	FIX: automatically disable digests when enabling mailing list mode	2016-11-28 15:52:35 +01:00
Guo Xiang Tan	f824afb4d3	FEATURE: Allow date_of_field column to be updated.	2016-11-17 15:16:58 +08:00