forums-security-procs.tcl

  • last updated 7 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Add @see for deprecated procs

Add documentation for public proc (fixes automated tests), feed user_id from arguments to permission api, explicitly default to current user (as called procs would do anyway)

Provide a minimal documentation to public procs

  1. … 2 more files in changeset.
Fix regression when checking if user can anonimously post

Replace deprecated 'forum::security::can_moderate_forum_p' by 'permission::permission_p'

  1. … 2 more files in changeset.
Replace deprecated 'can_read_forum_p' by 'permission::permission_p'

Deprecate wrappers for 'permission::permission_p' and permission::require_permission.

  1. … 4 more files in changeset.
Implement post anonymously through explicit forum attribute in table

Now moderators can explicitly decide whether a forum will enable posting anonymously or not.

Forum must be in a policy different from closed and the anonymous flag must be set accordingly for this to happen.

Also:

- normalize api in a way it can accomodate all current attributes. In particular,

now edit api will now leave every unspecified attribute unchanged, instead of

setting it to some default.

- fix some usability issues when managing forum parameters (e.g. values not

retrieved in form when editing existing forum)

- introduce missing Oracle upgrade script for the whole forum reform

- fix oracle creation script

  1. … 10 more files in changeset.
Assume moderators have always the right to post

Fix typo in deprecated proc (not used upstream anymore)

Forum reform

- remove hardcoded dependency with registered_users group. Target is to improve suitability in convoluted multi groups/multi subsites context

- in place of previous permission-based machinery, use plain table columns to detect whether user can or cannot post replies/new threads

- remove permission check at the message level in favor of that on forum level

  1. … 21 more files in changeset.
merged changes from the oacs-5-9 branch and resolved conflicts

  1. … 7834 more files in changeset.
- add editor hints to keep spaces/tabs in the future more consistent

  1. … 350 more files in changeset.
Fix for bug 3153 to 'consider anonymous users' was wrong. rolling back.

Fix for bug 3153 to 'consider anonymous users' was wrong. rolling back.

changed registered_user magic to unregistered_vistor hopefully to prevent anonymous posts without permission

More fixes for bug 3153 to consider the "anonymous" user case

  1. … 2 more files in changeset.
Fix for bug 3153

  1. … 4 more files in changeset.
- present reply/post button only, when permissions allow it

- present email-message button only, if user is logged in

- present mark_all_read button only, if user is logged in

- add parameter "-user_id" to forums:permissions for orthogonality with the rest of the API

  1. … 4 more files in changeset.
Initial import of forums version 1.2.0d4

  1. … 43 more files in changeset.
Factored pages into includes.

  1. … 99 more files in changeset.
merge of changes on oacs-5-0 branch to oacs-5-0-0b4 tag

  1. … 598 more files in changeset.
accidentally used a dotlrn proc outside of dotlrn - fixing

fix to bug 375

Allow anonymous postings

  1. … 8 more files in changeset.
merge of 4.6.3b1 to HEAD

  1. … 64 more files in changeset.
fixes forum_create perm checking bug 108/patch 29 Vinod Kurup

  1. … 2 more files in changeset.
merge from oacs-4-6

  1. … 103 more files in changeset.
I18N: converting the forums application to using the message catalog

  1. … 41 more files in changeset.
Added a not-allowed page, which forums seems to be redirecting to, anyway, but which wasn't there. And changed do_abort so that it doesn't throw an error, but rather an ad_script_abort, and so that it offers the user a login page if he isn't logged in, instead of simply throwing the not-allowed page.

  1. … 3 more files in changeset.