fc773b25b3
Use 403 forbidden on shifts json, atom export and ical export
5 years ago
8f8130634e
Show normal login page after registration, added msg() template function
5 years ago
a02f5e61be
Edit user: Prevent overwriting first and last name if temporary disabled
5 years ago
100602437f
User admin: Allow setting new groups if user has none assigned
5 years ago
3ce3129b6e
feature: disable lastname+prename in config
5 years ago
69b3a2440c
Admin user: Show force active status in log
5 years ago
a5f838d56a
fix back button on shift create preview
5 years ago
ead2b1582b
add overnight shift creation feature flag
5 years ago
770202e03d
Declare summary of atom feed items as HTML
...
RFC4287 Section 3.1.1 requires HTML content to be declared
as such with the "type" attribute, this commit adds that attribute
to the generated atom feeds.
5 years ago
76a7ceb27b
fixes #635 : set end of the last created shift to the official end inestead of first shift change on next day
5 years ago
d376c0d038
fix edit user error
5 years ago
1b3781cb2f
format admin_arrive dates accordingly as in user list
5 years ago
0c51d3c487
make shift calendar printable
5 years ago
bcce2625a8
Implemented AuthController for login
...
* Moved /login functionality to AuthController
* Refactored password handling logic to use the Authenticator
6 years ago
6ed891fc04
Added logout via AuthController
6 years ago
ead56a89fe
Only show the shift "Comment" field for own entries
6 years ago
4e709d0d23
Log messages without inline HTML
6 years ago
e7f10d846e
Escape log messages
6 years ago
f6a87535a0
add help button to ical export for android, fixes #402
6 years ago
4f1cef546e
better nick validation, fixes #429
6 years ago
79c92da8c1
Formatting
...
```bash
php-cs-fixer fix --allow-risky=yes --rules=@PSR2,psr4,mb_str_functions.php_unit_construct,php_unit_ordered_covers,trailing_comma_in_multiline_array --rules='{"array_syntax": {"syntax":"short"}}' [tests/|src/]
```
6 years ago
7c3a0c70e8
Bugfix: default value for planned_arrival_date and don't overwrite dect
...
Fixed registration form formatting
Fixed profile request attributes fallback values
6 years ago
79b30fa3a8
Support disabling the planned arrival
...
We also use Engelsystem for single-day events, and the planned
arrival/departure feature doesn't make sense for us.
6 years ago
665e444e88
Support disabling the DECT field
...
It's a really chaos-event-specific feature and is confusing for many
people on non-chaos events.
6 years ago
69c47dcc42
admin-free: Improved formattig
6 years ago
69ac1b2d21
Support disabling the arrival feature
...
Setting `autoarrive` to true will now cause all newly registered angels
to be automatically confirmed as arrived.
6 years ago
afa4506e11
Support alternative home sites
6 years ago
60ad343b22
fixes #178 : Show not only next but also last shift in free angels view
6 years ago
1bb2c57842
comments: Don't strip characters
...
closes #510 (htmlentities-like content in a comment gets removed)
6 years ago
6df3dc8489
questions: Don't strip content from messages
...
closes #545 ("=" removed in Questions & Answers)
6 years ago
012d5a4722
Don't strip characters from direct messages
6 years ago
540efef63e
active angels: Bugfix and prevent errors when searching double spaces
6 years ago
db26412e6c
fixes #549 : fill missing arrival dates and prevent setting arrival by admin-user instead of admin-arrive
6 years ago
acd9ec6966
add multiple shifts: Fix hour regex and sorting, cleanup and formatting
6 years ago
36830c43e7
Fix warning if searching two whitespaces and formatting
6 years ago
31d9efb2b8
Bugfix: Edit user: Show groups list if angel has no rights
6 years ago
d214525e24
Sort Angels Alphabetical
...
closes #541 (Shift Signup: Sort Angels Alphabetical)
6 years ago
8c5b52aa11
reformatted code due to guidelines
6 years ago
60a9c15454
first draft for #536
6 years ago
b1d8fede46
user: allow up to 40 characters for dect numbers
...
closes #309 (EPVPN number in DECT field is shortened)
closes #529 (For dect numbers are only 5 digits allowed)
6 years ago
c5621b82cf
Implemented /metrics endpoint and reimplemented /stats
...
closes #418 (/metrics endpoint)
Usage:
```yaml
scrape_configs:
- job_name: 'engelsystem'
static_configs:
- targets: ['engelsystem.example.com:80']
```
6 years ago
204ff4c0e7
rooms admin: Set a maximum character length
...
closes #525 (Room names with more than 35 characters dispatch a team of untrained monkeys)
6 years ago
93b819025c
fix margin of form submit in tables
6 years ago
252f003b94
Really fix the data/timepicker CSS and JS
...
Attaching the timepicker to the input instead of the sorrounding div didn't
turn out as expected. Therefore, I used the same mechanism for DOM attachment
and lazy initialization for the timepicker like for the datepicker.
Instead of trying to load the CSS through webpack and some JS voodoo, it's
a lot simpler to just include it via the normal base theme CSS. This works.
In addition, I noticed that there is an easier way to read the current locale.
No need to do this twice via different ways.
This closes #516 .
6 years ago
7e53c45890
Change the color of "reset" in admin_arrive
6 years ago
ed5ee3235e
Add timepickers in shifts view
6 years ago
c33940f64a
Moved permission checks to Authenticator class
6 years ago
944c29b964
Require POST for sending forms
...
* Ensure that the form is submitted with a post request
* Replaced several links with forms
Closes #494 (Security Vulnerability)
6 years ago
23c0fae36f
Added csrf middleware
6 years ago
8236989be0
fix missing unique mail validation on user register
6 years ago
Igor Scheller