Commit Graph

47 Commits

Author SHA1 Message Date
570510f18d Merge pull request #1135 from ae-utbm/group
Small group tweak
2025-06-25 22:04:56 +02:00
02ef8fdb88 fix: enumeration attack vector on login form 2025-06-25 17:03:53 +02:00
88b70bf51f rename main groups to their real production version 2025-06-18 18:01:37 +02:00
Sli
17129af1bb Remove unused popup system and jquery-ui 2025-06-16 09:05:19 +02:00
ee3646594b fix promo logo older than promo 10 2025-06-05 16:31:36 +02:00
9256aff944 redirect /user/me/* 2025-05-26 08:48:18 +02:00
ff1f1040b6 simplify User.cached_groups 2025-05-22 10:43:49 +02:00
ff220e67c1 use new django.url.reverse query kwarg 2025-04-11 14:54:06 +02:00
805ffc498f response.content.decode() => response.text 2025-04-11 14:54:06 +02:00
f4276d6be5 fix account creation view tests 2025-04-11 14:54:06 +02:00
Sli
6e39b59dd5 Use UploadedImage to check image correctness and better error responses 2025-04-09 22:15:12 +02:00
Sli
67bc49fb21 Serve upload files directly from nginx 2025-04-09 20:55:24 +02:00
Sli
91b30e7550 Add quick upload tests 2025-04-09 20:55:24 +02:00
fe5c685204 fix displayed user tabs 2025-04-06 14:17:12 +02:00
d16237d015 make PageCreateView a PermissionRequiredMixin 2025-03-13 18:49:42 +01:00
5c5755d4a6 make logout a POST operation 2025-03-13 18:49:42 +01:00
Sli
e46cba7a06 Move all user picture logic to sas 2025-02-18 20:10:51 +01:00
36076aefcc fix user groups update view
Le formulaire remplaçait la totalité des groupes de l'utilisateur, c'est-à-dire également les groupes pas affichés dans le formulaire. Ça fait que la soumission du formulaire retirait l'utilisateur de tous ses groupes de groupes et des autres groupes non-gérables manuellement (comme Publique et Anciens Cotisants).

Jusqu'ici, les groupes non-manuels étaient gérés bizarrement, en regardant dynamiquement à chaque fois si l'utilisateur est dans le groupe, donc le bug ne se voyait pas. Maintenant que tous les groupes sont gérés presque de la même manière, ça se voit.
2025-02-07 13:28:47 +01:00
d0b1a49300 deprecate CanCreateMixin
Les motifs de cette déprécation sont indiqués dans la documentation.
Le mixin a été remplacé par `PermissionRequiredMixin` dans les endroits où ce remplacement était aisé.
2025-01-13 18:20:29 +01:00
4d0d7adce1 Merge pull request #998 from ae-utbm/simpler-com
Rework news creation form
2025-01-11 20:47:21 +01:00
d3f21c8f16 remove news event type 2025-01-10 22:08:10 +01:00
a8810816f0 Give the public group to newly created users 2025-01-10 02:23:07 +01:00
af47587116 Split groups and ban groups 2025-01-05 15:49:08 +01:00
6400b2c2c2 replace MetaGroups by proper group management 2025-01-03 01:18:28 +01:00
8c660e9856 Make core.User inherit from AbstractUser instead of AbstractBaseUser 2024-12-19 10:39:04 +01:00
3b39049c20 Make User.generate_username less stupid 2024-11-19 13:07:59 +01:00
Sli
40f2f7033e Add test for AllowFragment mixin 2024-11-11 13:49:38 +01:00
Sli
3af5d96bf5 Introduce htmx in sith files
* Convert FileModerationView into ListView and add pagination with htmx
* Don't allow sas moderation in file moderation view
* Split up base.jinja and introduce base_fragment.jinja
* Improve FileModerationView performances and make it root only
* Add permissions tests for file modération
2024-11-11 13:49:38 +01:00
486047b929 remove the honeypot from the login page
Des utilisateurs humains se font régulièrement "éclairer" par le honeypot. Les mesures anti-bot ne devraient pas bloquer des humains.
2024-11-11 00:22:07 +01:00
d16a207a83 Add more Ruff rules (#891)
* ruff: apply rule F

* ruff: apply rule E

* ruff: apply rule SIM

* ruff: apply rule TCH

* ruff: apply rule ERA

* ruff: apply rule PLW

* ruff: apply rule FLY

* ruff: apply rule PERF

* ruff: apply rules FURB & RUF
2024-10-15 11:36:26 +02:00
564d95f701 fix: InvoiceQuerySet.annotate_total() (but for real this time) 2024-10-13 10:37:48 +02:00
7312580a8d fix: InvoiceQuerySet.annotate_total() 2024-10-12 15:52:40 +02:00
465e0f31d9 write command test 2024-10-11 09:57:46 +02:00
6a64e05247 select inactive users 2024-10-11 09:45:54 +02:00
2111a2c67e Merge pull request #859 from ae-utbm/account-pages
Optimize user account pages
2024-10-08 19:55:45 +02:00
b0884c6b04 return 404 when accessing not existing account 2024-10-08 15:30:35 +02:00
5ee0ee8efb tests for picture ownership 2024-10-05 21:02:19 +02:00
a4fe4996aa Merge pull request #834 from ae-utbm/real-name
Restore real name
2024-10-03 10:12:23 +02:00
c5f5ad3f75 fix 500 when searching users 2024-09-29 23:01:55 +02:00
bbcc7ffeaa Merge pull request #839 from ae-utbm/user-ordering
User ordering
2024-09-25 17:51:25 +02:00
93f4dede3e Put users that never logged in at the end 2024-09-25 14:36:22 +02:00
43917317b4 optimize file recursive rights 2024-09-25 12:31:51 +02:00
f182de5929 restore user ordering 2024-09-24 12:52:40 +02:00
c6657bffd2 fix: profile picture deletion by board members 2024-09-23 23:35:14 +02:00
Sli
9c93162741 Add missing files 2024-09-23 10:25:27 +02:00
Sli
6068c6048a Use real name of the website once again 2024-09-23 01:37:25 +02:00
f624b7c66d Graph de famille en frontend (#820)
* Remove graphviz and use cytoscape.js instead

* Frontend generated graphs
* Make installation easier and faster
* Better user experience
* Family api and improved interface
* Fix url history when using 0, improve button selection and reset reverse with reset button
* Use klay layout
* Add js translations and apply review comments
2024-09-17 12:10:06 +02:00