Denis Flaven
32ce26aa7d
Fix for potential XSS vulnerability on uploaded file names. To be further tested before retrofitting in branches.
...
SVN:trunk[3985]
2016-04-05 16:15:29 +00:00
Guillaume Lajarige
1784653678
Cleanup and optimization of the handling/loading of the dictionary files.
...
SVN:trunk[3980]
2016-04-04 13:56:36 +00:00
Denis Flaven
447fc85867
Optimization: load "pdftage" (and thus tcpdf) only when needed.
...
SVN:trunk[3979]
2016-04-04 13:44:59 +00:00
Denis Flaven
f3773f6047
Cleanup and optimization of the handling/loading of the dictionary files.
...
SVN:trunk[3978]
2016-04-04 13:44:15 +00:00
Romain Quetiez
70e0fab267
Fixed regression introduced with [3912] and partially fixed in [3954] : when the autocomplete is active, then the search dialog was not working anymore.
...
SVN:trunk[3972]
2016-03-30 12:11:57 +00:00
Romain Quetiez
7868c4364c
Label of the final class attribute could only be defined on the root class (overriding it in derived classes had no effect)
...
SVN:trunk[3971]
2016-03-29 14:22:13 +00:00
Guillaume Lajarige
2a5ca467fd
Alpha 2.3.0 fixes :
...
- Multiple request templates on portal
- SelectField interface stabilization
- UI fixes on portal
- Forms updates on lifecycle
SVN:trunk[3970]
2016-03-29 12:33:08 +00:00
Romain Quetiez
0104c3fe41
ResetStopWatch could not be used as a lifecycle action: the symptom is "The action has failed".
...
SVN:trunk[3967]
2016-03-25 10:02:29 +00:00
Romain Quetiez
847c1d2736
Custom fields: track the changes and improve the robustness with regards to the Exception thrown by the handler. Also fixed an issue with DBObject, causing the custom fields to be written several times if invoking DBUpdate more than once. Theoretically, this issue affects any type of attribute.
...
SVN:trunk[3966]
2016-03-24 10:49:04 +00:00
Romain Quetiez
462af27157
Custom fields: comparing two sets of values is delegated to the custom fields handler because the values must be interpreted before concluding (blind comparison resulted in objects being written though the values were equivalent)
...
SVN:trunk[3964]
2016-03-22 16:55:51 +00:00
Romain Quetiez
ea31d71d16
Custom fields: check data against the form prior to recording (do not rely solely on the HTML form)
...
SVN:trunk[3963]
2016-03-22 09:02:03 +00:00
Guillaume Lajarige
24fcb20927
Form : Started fix on CaseLog field in the portal. Only the edit value is now in the editor. Still have to display the history below.
...
SVN:trunk[3961]
2016-03-18 15:04:49 +00:00
Romain Quetiez
c201ae4147
Fixed regression introduced with [3912] : autocomplete not working (new User request with lots of existing user requests)
...
SVN:trunk[3954]
2016-03-17 14:04:48 +00:00
Guillaume Lajarige
4b7fb20eaf
DBSearch : Allow join between DBUnionSearch by adding the DBUnionSearch::Join verb
...
SVN:trunk[3952]
2016-03-16 16:45:39 +00:00
Romain Quetiez
4006fce0f2
Exclude magic parameters when listing query parameters (refactoring from run_query) This enables the use of magic parameters in the exports. The issue was less exposed in iTop 2.2.0 because only one single magic parameter was available.
...
SVN:trunk[3948]
2016-03-11 20:42:04 +00:00
Guillaume Lajarige
44ba3d7bf8
CustomFields : Bootstrap integration
...
SVN:trunk[3945]
2016-03-11 14:34:16 +00:00
Guillaume Lajarige
7ea5176b56
CustomFields : Bootstrap integration
...
SVN:trunk[3944]
2016-03-11 12:42:21 +00:00
Romain Quetiez
e6887ab317
Custom fields: alpha version.
...
SVN:trunk[3943]
2016-03-10 16:55:13 +00:00
Denis Flaven
67c92ab946
Modified the "List" tab of the Impact Analysis to display only the actually impacted objects. The content of this tab is now refreshed every time the graph is rebuilt to take into account the "context" changes which causes the actual impact to change, or the filtering.
...
SVN:trunk[3941]
2016-03-09 18:05:14 +00:00
Romain Quetiez
ced87e71cb
Magic query arguments - fixed a regression: URL exceeding 4000 characters (!) because the serialized queries were including magic arguments. Those arguments must be computed right before executing the query. An alternative to this implementation could be to serialize a DBSearch with its parameters computed at serialization time.
...
SVN:trunk[3939]
2016-03-04 15:03:46 +00:00
Romain Quetiez
e26eed3142
#1210 (reopened) ...fixed a regression on commit [r3936]: dependent fields could not be loaded when there are link set attribute in the current form
...
SVN:trunk[3938]
2016-03-04 14:22:13 +00:00
Denis Flaven
7e3d526de3
Background process for cleaning expired temporary attachments and inline images.
...
SVN:trunk[3935]
2016-02-29 17:20:43 +00:00
Denis Flaven
53029f9fc3
Optimization/bug (!): Never use the whole object as a placeholder in ApplyParams !!
...
SVN:trunk[3931]
2016-02-29 16:20:41 +00:00
Denis Flaven
22ccb317d6
Optimization: do not load all columns when checking if a CI is part of the "context" of a given ticket.
...
SVN:trunk[3929]
2016-02-29 15:47:52 +00:00
Denis Flaven
6bd89f31d3
Prevent access to *any* InlineImage by just guessing its identifier, now an additional "secret" is needed, making it much harder to guess (but not 100% impossible, beware !)
...
SVN:trunk[3927]
2016-02-26 10:18:46 +00:00
Denis Flaven
608e94a613
Inline images in formatted case log & descriptions: beta version fixperms js The inline images are now no longer stored stored as Attachments but using a specific object InlineImage...
...
SVN:trunk[3926]
2016-02-25 15:06:04 +00:00
Denis Flaven
63b6b95f71
Use one-way encryption for storing the token used for the "Forgotten password" feature.
...
SVN:trunk[3920]
2016-02-19 18:17:11 +00:00
Romain Quetiez
bfadbc4098
Prerequisites for custom fields
...
SVN:trunk[3918]
2016-02-19 12:30:19 +00:00
Denis Flaven
4e24e9899e
(HTML) Formatted Case Logs, Description and Notifications with inline images uploaded as Attachments. Beta Version !!
...
SVN:trunk[3916]
2016-02-19 10:03:59 +00:00
Romain Quetiez
e0fad5e0e6
Magic query arguments:
...
- In addition to current_contact_id, the following arguments can be used in any OQL query (provided that the page running the query requires a login): current_contact->attcode and current_user->attcode
- Code refactoring: magic arguments in one single place
- The "Run queries" page is now taking into account those magic arguments (do not prompt the end-user with these arguments!)
SVN:trunk[3912]
2016-02-17 18:55:46 +00:00
Romain Quetiez
b978a5d219
Fixed regression introduced in [3852] : setup not working anymore ($_SESSION is unset and a notice is issued, which can prevent the install from completing, depending on your PHP error level).
...
SVN:trunk[3891]
2016-01-28 11:11:12 +00:00
Romain Quetiez
3cfcbeb654
Internal: fixed the verb DBObjectSearch::IsAny
...
SVN:trunk[3886]
2016-01-26 14:49:37 +00:00
Guillaume Lajarige
e1409ba39c
Fixed a regression due to the DesignDocument factorisation :
...
- DesignDocument class : Namespace issue with DOMFormatException
- Compiler class : Parameters 2 & 3 of the DOMFormatException constructor needed to have a default value
SVN:trunk[3885]
2016-01-26 14:34:53 +00:00
Denis Flaven
ef6299c6b4
#1183 : more refactoring and some robustness enhancements after tests on big datasets.
...
SVN:trunk[3881]
2016-01-26 13:22:47 +00:00
Denis Flaven
9da19de860
Suppress "Notice" messages when iconv detects invalid UTF-8 characters, since it breaks the JSON output if display_errors in On...
...
SVN:trunk[3878]
2016-01-25 17:10:39 +00:00
Denis Flaven
764c551f0f
#1183 : grouping threshold is now taken int account for "Depends on..." graphs (i.e. grouping backwards)
...
SVN:trunk[3875]
2016-01-25 14:33:00 +00:00
Denis Flaven
410c47178d
#1176 : empty placeholders are represented by an empty string as in previous version.
...
SVN:trunk[3873]
2016-01-25 12:46:56 +00:00
Denis Flaven
61e2f97d6c
#1150 : Spurious message "A restore is running..." - FIXED !
...
SVN:trunk[3864]
2016-01-20 15:56:09 +00:00
Guillaume Lajarige
879f5d89b9
Moved static method GetAllowedPortals() from LoginWebpage class to UserRights class.
...
SVN:trunk[3862]
2016-01-15 10:32:17 +00:00
Romain Quetiez
6d23d64e8f
Code refactoring: eliminated duplicate code between MFDocument and ModuleDesign
...
SVN:trunk[3860]
2016-01-14 14:11:25 +00:00
Romain Quetiez
8c4e84dfaf
New type of attribute: AttributeMetaEnum.
...
Designed to cope with the need to select tickets by operational status. The value of this attribute is computed by the framework. It depends on the actual ticket status (that attribute cannot be known by the root class because its definition varies from one type of ticket to another).
The data model has been enriched with the new attribute Ticket::operational_status. Its value is 'active' unless the ticket status is either 'rejected', 'resolved' or 'closed'. The existing dashboards have been left unchanged but should be revised to fully benefit from the new attribute (e.g. Open requests, Open problems, etc.)
Note: the alpha version of the compiler had already been committed by mistake a few days ago.
SVN:trunk[3859]
2016-01-13 14:35:21 +00:00
Romain Quetiez
3be0bc8ca8
Improved the User Rights management API:
...
- new verbs: HasProfile and ListProfiles
- doing less queries (no need for listing all the profiles, caching the user profiles into the SESSION cookie
- did some code cleanup (unused variables)
SVN:trunk[3852]
2015-12-15 20:30:30 +00:00
Romain Quetiez
ab38ce63a5
Portal: let the administrator specify an alternative URL for the portals (rewriting rules)
...
SVN:trunk[3848]
2015-12-10 13:06:42 +00:00
Guillaume Lajarige
c69279ee20
Fixed a typo in ModuleDesignElement->Dump() function. Was creating an object of iTopDesignDocument class instead of ModuleDesign class.
...
SVN:trunk[3839]
2015-12-02 10:38:24 +00:00
Denis Flaven
a16e746aa1
Fixed the computation of the lowest common ancestor.
...
SVN:trunk[3837]
2015-12-02 10:32:37 +00:00
Romain Quetiez
b1f62c8409
Internal: dehardcoded OqlUnionQuery::GetClass against the metamodel reflection API
...
SVN:trunk[3836]
2015-12-01 16:23:35 +00:00
Romain Quetiez
4a85f7f12b
Added AttributeDef::EnumTemplateVerbs, to generate the documentation about the available attribute formatting placeholders
...
SVN:trunk[3835]
2015-11-30 16:56:22 +00:00
Denis Flaven
818be68c2d
Make sure we don't redefine CoreException.
...
SVN:trunk[3833]
2015-11-30 14:07:18 +00:00
Guillaume Lajarige
908b442b26
Core : Added CloneWithAlias function to DBSearch class. It creates a new DBObjectSearch from a DBSearch with a new alias.
...
SVN:trunk[3826]
2015-11-25 11:16:30 +00:00
Romain Quetiez
93654dc656
Core: a module can have its own design defined in XML (/itop_design/modules_designs/module_design) and accessed at run time via the class ModuleDesign. Switching to XML version 1.3.
...
SVN:trunk[3820]
2015-11-10 12:39:45 +00:00