Commit Graph
5668 Commits
Author SHA1 Message Date
Bharat Mediratta 30d541cb26 Copy this from the default theme and change <h3> to <h2> 2008-12-20 00:51:15 +00:00
Bharat Mediratta 99f131d9ae Create module::load_themes() to load the correct theme after we do
routing and know whether we're going to an /admin page or a regular
one.
2008-12-20 00:50:37 +00:00
Bharat Mediratta 6564007a9d Implement admin user editing. It's still very rough. Trying to
figure out how to share forms between user and admin editing.

Incremental improvement
2008-12-19 22:16:10 +00:00
Bharat Mediratta 9d2d824336 Fix a bug in admin delegation. 2008-12-19 22:14:14 +00:00
Bharat Mediratta 17c0b01444 Add access::forbidden() 2008-12-19 22:13:33 +00:00
Bharat Mediratta 855a5928ce Create a new pattern for Site Admin controllers:
1) They must all start with "admin_".  This pattern is not directly
   routable.

2) Their urls must be /admin/xxx.

3) The Admin_Controller will take the xxx and look for Admin_Xxx_Controller
   and will delegate to that admin controller, after doing security checks.

Moved the users and dashboard views into individual modules for now.
2008-12-19 09:47:13 +00:00
Bharat Mediratta 2438dba396 Delete the var/thumbs .htaccess files, too. 2008-12-19 07:16:38 +00:00
Chad Kieffer 12e9c136f2 Add a bit more space under gHeader. 2008-12-19 06:10:45 +00:00
Bharat Mediratta 5d2b1ae056 Don't try to validate the form unless it's a POST request. 2008-12-19 03:05:11 +00:00
Bharat Mediratta 0cf07fbeec Fix indentation. 2008-12-19 03:02:58 +00:00
Chad Kieffer 6a58deb3a1 Missed this in last commit. Say it with me, run svn status before svn ci :) 2008-12-19 02:02:38 +00:00
Chad Kieffer 4a4ec2b486 Restored admin menu. Restored call to default theme's style sheet during development, to simplify the process. Admin specific styles go in admin_default/css/screen.css. Moved jquery files out to css and js. 2008-12-19 01:54:53 +00:00
Bharat Mediratta 8b3e244578 We always have at least 1 page in an album. 2008-12-19 01:26:49 +00:00
Bharat Mediratta c00dc21ba8 Add session based CSRF protection to all forms 2008-12-19 01:24:27 +00:00
Bharat Mediratta 5ca17fd273 Allow server-side adding of images to other albums than the root 2008-12-19 00:48:45 +00:00
Bharat Mediratta 77c97daa37 Don't restrict image overlays 2008-12-19 00:47:37 +00:00
Bharat Mediratta f5bc55e72d Add labels to the form groups. 2008-12-18 22:35:16 +00:00
Bharat Mediratta a74537ad59 Don't wrap hidden inputs in <li/> 2008-12-18 22:29:49 +00:00
Bharat Mediratta 052bb79d68 Add <fh:complete/> 2008-12-18 18:50:27 +00:00
Bharat Mediratta c67234974d Refactor site admin menu into a theme function and build the menus in
the various modules.  In the process, rename xxx_menu::site_navigation() to just
xxx_menu::site().  And add xxx_menu::admin().

The menus are the same as before, but I changed the HTML to be
consistent with the way that we do it in the regular site, and this
broke the superfish styles.  I don't know how to fix this.. help me
Chad!
2008-12-18 07:32:34 +00:00
Chad Kieffer aed68bfa9f I'm tired of clicking. Here are a few Selenium IDE tests. 2008-12-18 07:00:47 +00:00
Chad Kieffer c2598fe4d8 Dialog polishing. They now resize their height. Updated form styles in the context of dialog display (don't show legends, fieldset border, or submit button).
Let's make sure that all forms generated are complete and well formed and then use JS and CSS to control their display and behavior in different contexts.
2008-12-18 02:50:40 +00:00
Bharat Mediratta dc5faf0ebf Update cookie handling to ignore $Version, $Path and $Domain cookie
attributes and make it RF2109 compliant.
2008-12-18 00:41:55 +00:00
Bharat Mediratta c92fbfd3c3 Add <generator> element to try to make Polar Rose happy (it doesn't work, though) 2008-12-18 00:29:22 +00:00
Bharat Mediratta db110df5ba Absoluteify some urls to make feedvalidator.org happy 2008-12-18 00:28:30 +00:00
Bharat Mediratta d4f1f6400f Polar Rose facial recognition module. Currently in a non-working
state because their server is not RFC2109 compliant.  Filing a bug.
2008-12-18 00:16:03 +00:00
Bharat Mediratta 55f63f6c9f Add item view permission checks.
Switch from absolute urls to relative ones.

Relative urls break the flash based slideshow, but the Cooliris
extension works.  I'll file a bug.
2008-12-18 00:02:59 +00:00
Bharat Mediratta b37047ff55 Add Item_Model::viewable() which we can use to restrict any query to
just items viewable by the active user.  Ie:

  ORM::factory("item")
    ->where("name", "foo")
    ->find_all()

Would get all items with the name "foo".

  ORM::factory("item")
    ->viewable()
    ->where("name", "foo")
    ->find_all()

Restricts it to just the set of items that the user is allowed to see.
2008-12-17 22:39:33 +00:00
Bharat Mediratta fe39641089 Update Kohana code to r3799 from their svn head. All tests pass.
Resolved upstream tickets:
  http://dev.kohanaphp.com/ticket/972

Command:
  svn merge -c19275 vendor/kohana/modified/kohana trunk/kohana
2008-12-17 19:28:26 +00:00
Bharat Mediratta 093fb407a8 Fix a bug where setting the active user did not reset group_ids (unit tests ftw!) 2008-12-17 19:23:04 +00:00
Bharat Mediratta 9b6ccfc7f3 Fix some lint errors 2008-12-17 19:06:39 +00:00
Bharat Mediratta 26f0b4e44d Clear out module list in load_modules() before trying any db operations 2008-12-17 19:04:20 +00:00
Bharat Mediratta d1c737ffac Extend the changes in list_tables() and list_fields() that uses
TEST_MODE to avoid static members.
2008-12-17 19:03:36 +00:00
Bharat Mediratta fa5a8fde4a Switch from cookie sessions to database sessions. We can't use cookie
sessions; it encodes all the value into the cookie which means
little/no security, transfer costs, and storage limits.
2008-12-17 18:32:08 +00:00
Bharat Mediratta 130e26983a Add initialization to the user module to put the user and group_ids
into the session, for easy access.  This cuts down the number of
queries when we're loading images through file_proxy.php
2008-12-17 17:40:45 +00:00
Bharat Mediratta 2abe82f106 Put Gallery3 under GPLv2 2008-12-17 17:10:08 +00:00
Chad Kieffer 01f6c67eb5 Added .gLoadingLarge and .gLoadingSmall to show ajax loading indicator. Applied to modal dialogs. 2008-12-17 06:22:08 +00:00
Bharat Mediratta 78cd00312e Improve performance by finding the item without walking the tree.
Instead, use the level and the name to get a short list of candidates,
and check each one of those.  In most cases, this query should give us
the right result the first time.
2008-12-17 05:53:05 +00:00
Bharat Mediratta 8630d61051 Change the album thumbnail/resize from _album.jpg to .album.pjg
because the leading underscore confuses the Kohana router.
2008-12-17 04:55:49 +00:00
Bharat Mediratta fc7b78492b Separate thumbnails out into var/thumbs. This clears up some ambiguity in Item_Model and simplifies
file_proxy.  It also means we can stop munging file names in the var/resizes hierarchy.

In the process, rename "thumbnail" to "thumb" everywhere in honor of
Chad (well, ok because it's shorter)..
2008-12-17 04:45:35 +00:00
Tim Almdal f8a0c91ce6 Drag & Drop the watermark now works and so does the dropdown box. The target image is divided into a 3x3 quadrant referenced as: northwest, north, northeast, west, center, east, southeast, south, southwest. Similiar to the imagemagik garvities. Currently the watermark is placed in the left top of the particular quadrant. 2008-12-17 01:26:40 +00:00
Chad Kieffer 9fa566a1c9 Added label to add tag form input 2008-12-17 01:19:13 +00:00
Chad Kieffer 3c05b95620 Added JS to set/reset simple forms' input values to their corresponding labels' value. Labels should always be used with visible inputs. Use this to style and control short form input display and behavior. 2008-12-17 00:45:52 +00:00
Bharat Mediratta f4c6a20149 Remove error checking; if this fails let it fail noisily for now so that we can find problems faster. 2008-12-16 23:59:33 +00:00
Bharat Mediratta af32e5708d Remove all caching from ORM_MPTT. This was premature optimization: it
wasn't benefitting us, and it will get in the way when we want to add
implicit view protection to our queries.
2008-12-16 23:36:56 +00:00
Bharat Mediratta 34484fb1b5 Dump out the stack trace on errors. 2008-12-16 23:33:43 +00:00
Bharat Mediratta 59bb72df88 Fix preamble 2008-12-16 23:11:24 +00:00
Bharat Mediratta 8c7d0a76e5 Add file_proxy. This is controller gets triggered by .htaccess
protection on var/albums and var/resizes and only displays files to
the user if they have "view" permission on the base ite.
2008-12-16 23:07:33 +00:00
Tim Almdal 363548bfc4 2008-12-16 20:40:29 +00:00
Tim Almdal b0c21915e9 Oops, remove the () on the parameter to $("#Dialog").ready(...) so we pass the function, not the results of the function call. 2008-12-16 19:16:34 +00:00