112be64095
Reverted after EiffelWeb reverted the change that made WSF_URI_HANDLER and WSF_URI_TEMPLATE_HANDLER inheriting from WSF_EXECUTE_HANDLER.
master
develop
Jocelyn Fiat2017-11-07 23:14:11 +01:00
aa1443cb8f
Fixed conflicts between versions of repeatedly inherited feature.
Jocelyn Fiat2017-11-07 15:54:20 +01:00
6b2e256fa7
Use absolute URL for href value in webapi json response.
Jocelyn Fiat2017-10-27 12:27:05 +02:00
f8715d54a8
Improved credential validation. - added CMS_USER_API.user_with_credential (...): detachable CMS_USER that check if credential is valid, and return associated user. - replaced use of is_valid_credential by new function user_with_credential . - revisited the session auth, to allow other credential validations (other than ROC CMS auth). - added CMS_USER_API.credential_validations to allow authenticating with system other than ROC CMS. Added new permission to allow by-passing the default ROC-CMS user login/register management: - new permission to edit its own account. - new permission to edit its own password. - new permission to view users details (mostly for user managers).
Jocelyn Fiat2017-10-27 12:26:21 +02:00
e8f024ede5
Added debug purpose class to collect info about cms setup.
Jocelyn Fiat2017-10-17 13:47:00 +02:00
95d2306b1f
Made initialization safer, by reporting errors reported during CMS_API initialization
Jocelyn Fiat2017-10-17 13:46:43 +02:00
60fbba5a70
Added CMS_WEBAPI_HANDLER.new_permissions_access_denied_error_response (..) to provide the required permissions.
Jocelyn Fiat2017-10-17 13:45:32 +02:00
6b4b3f3539
Display verbose output only if --verbose is set. Report at the end, a quick summary of the installation.
Jocelyn Fiat2017-10-04 18:20:48 +02:00
3088468332
Allow to login with username or email. Removed useless and unimplemented feature from CMS_FORM . SCOOP is default for demo.ecf Made blog and page module self administrable, i.e administration module is same as module. This fixes the export hook for page and blog modules. Improved sql instructions to ease debugging and catch missing sql_finalize... call. Cleaned sql code.
Jocelyn Fiat2017-10-02 15:46:40 +02:00
bc561b1a48
Fix authenticated role permissions, now it also has all anonymous permissions. Added permissions on basic auth, to have more control on who can authenticate with basic auth. Use webapi version of basic auth filter. For webapi, when authenticated /api/user/ is the same as /api/user/{uid} where uid is the id of current logged in user.
Jocelyn Fiat2017-09-21 12:49:17 +02:00
9d7d43073d
Moved activation implementation into authentication api. Improved core webapi, added registration link, support redirection. Use error webapi response, rather than send_... routines.
Jocelyn Fiat2017-09-19 21:21:30 +02:00
e04138c89e
Added auth_api: CMS_AUTHENTICATION_API, and for now moved registration instructions inside. Added authentication module webapi, to provide registration via webapi. Improved the roles display by providing table of permissions if asked. Added various links in primary tabs to navigate back to roles or users, depending on the page. Added datetime to-from string converters in CMS_ENCODERS. Start removing CMS_ADMINISTRABLE. Added permission to use simple core access token. Added webapi for users: list, new, register.
Jocelyn Fiat2017-09-12 23:07:45 +02:00
6b4668ec6b
Cleaned demo.ecf Fixed modules admin handler permission checking from "admin.installation_access" to "administration.installation_access". Use constants for known form id. Invoke hook form alter for user view response. Include theme when installing roc cms library.
Jocelyn Fiat2017-09-11 22:31:23 +02:00
5f7eb82def
Use real user display name when possible for messaging module.
Jocelyn Fiat2017-09-06 22:02:17 +02:00
e9c028b94e
Improved node feed and recent changes feed by setting proper feed id and feed item id, and set expected author name.
Jocelyn Fiat2017-09-06 16:58:42 +02:00
2fcbcf1938
Added store_mysql_fake persistence solution, to compile a ROC CMS system with mysql interface, but no real mysql driver. This is mainly during dev using sqlite, to include the mysql interfaces without depending on related C .lib files that are not always compiled.
Jocelyn Fiat2017-09-06 10:26:47 +02:00
82bf9a4294
Converted ecf files to 1-16-0, to use a single ecf file for all variants (void-safe, non-void-safe, ...). Keep *-safe.ecf as redirection to avoid breaking existing -safe.ecf projects.
Jocelyn Fiat2017-09-05 16:08:10 +02:00
af3698ba5e
Edit the path alias as url-decoded value, to avoid issue with %20 percent-encoded again and again as %25%20...
Jocelyn Fiat2017-09-05 15:55:47 +02:00
71721ea00b
Updated css for feed aggregator in demo example. cleaning.
Jocelyn Fiat2017-09-05 15:55:34 +02:00
ac9d29b971
Added basic webapi system to ROC CMS system. Added sql_delete routine to replace sql_modify with "DELETE FROM .." sql statement. Fixed filter setup when a module has more than one filter. Fixed filter setup for site,admin and webapi modes. Added CMS_AUTH_FILTER, and check if user is already authenticated, then skip following auth filters. Added specific webapi handler classes for root, user, access token, ... Added user profile system to the core module. Moved /user/{uid} from auth module to core module. Added possibility to add html before and after a cms form. (useful to add a form before or after, as nested form are forbidden). Now theme can be installed using roc install command.
Jocelyn Fiat2017-09-05 15:54:40 +02:00
c6b7c73588
Added basic auth for webapi. Fixed filter setup when a module has more than one filter.
webapi
Jocelyn Fiat2017-08-25 10:13:13 +02:00
471528e887
Fixed filter setup for site,admin and webapi modes.
Jocelyn Fiat2017-08-25 09:31:13 +02:00
5117466529
If user is already authenticated, skip following auth filters.
Jocelyn Fiat2017-08-25 09:20:50 +02:00
053cc000cd
Updated webapi system. Added specific webapi handler classes for root, user, access token, ... Added new queries to user profile api. Reviewed filter setup depending on the mode (site, admin, webapi).
Jocelyn Fiat2017-08-25 09:20:17 +02:00
db585a4873
Added webapi system and first attempt for the core webapi. Added user profile system to the core module. Moved /user/{uid} from auth module to core module. Added possibility to add html before and after a cms form. (useful to add a form before or after, as nested form are forbidden). Now theme can be installed using roc install command.
Jocelyn Fiat2017-07-11 20:53:48 +02:00
34f0aa5844
Improved feed aggregation module. Added support to choose either atom or rss for the "/feed" format. Added support for feed format view to feed aggregation. Use proper content type for RSS and ATOM response. For feed aggregation use ?view=feed or ?view=feed.atom or ?view=feed.rss Improved sized feed view. Use site name for recent changes feed title. Better name for node feeds (include the site name). Use current date when a feed aggregation is converted to a new feed, to set the last build date. Fixed category filter per feed location for the feed aggregation module. Fixed authentication module, where a potential case (but not probable) had no response content. Cosmetic and minor changes on messaging module.
Jocelyn Fiat2017-06-12 09:36:29 +02:00
b814c91e91
Updated obsolete message with expected timestamp. Removed a few obsolete calls or implicit conversions.
Jocelyn Fiat2017-05-12 15:59:31 +02:00
1aad62ed52
Added CMS_RESPONSE.request_url (...) Update a few callers of CMS_RESPONSE.url (...). Renamed the demo files using "server" instead of "demo".
Jocelyn Fiat2017-04-11 13:19:39 +02:00
1f6fce1278
Improved theming for admin vs site. - Added $theme_path, $base_path - Added CMS_RESPONSE.module_resource_url (...) instead of using hardcoded "/module/" + name + ... - Use base_path rather than base_url (note ROC CMS is not yet working with EWF standalone "base" url option)
Jocelyn Fiat2017-04-11 11:56:04 +02:00
3dc478b4a0
Fixed user registration activation workflow. - Fixed new user insertion in SQL database. - Removed temp user when activated. - Renamed local variable names related to temp users. - More information when error occurs during user registration.
Jocelyn Fiat2017-04-10 21:51:41 +02:00
5915af6a9c
Added masquerade dev module and disabled it by default. - it allows to login as a given user by passing security check. - it must be used only during development! - disabled by default! Updated the session auth module to make it easier to be reused. - masquerade module is based on the session auth module.
Jocelyn Fiat2017-04-06 15:33:10 +02:00
ad2b30f52b
Changed the way search modules get integrated with the theme via a new region "search". Improved current module for google search 2.0.
Jocelyn Fiat2017-04-06 14:02:20 +02:00
5273940b82
Fixed access to non published nodes (and also for the related revisions if any)!
Jocelyn Fiat2017-03-30 17:31:57 +02:00
e547279016
Implemented save/publish/unpublish control on nodes. Display on published blogs (except for admin, or author of the related blog).
Jocelyn Fiat2017-03-30 17:16:02 +02:00
230ef8ed18
Fixed video filter to support STRING_GENERAL .
Jocelyn Fiat2017-03-30 16:47:50 +02:00
d61fd85ea6
Item("") now returns the value itself (can be used to get all keys of specific object).
Jocelyn Fiat2017-03-30 15:43:07 +02:00
3072b99151
Fixed installation access permission using administration.installation_access instead of previous admin.installation_access.
Jocelyn Fiat2017-03-30 11:58:53 +02:00
0ce7d11e52
Implemented custom cms format, and associated administration pages. Applied to existing filter and format. Added embedded_video filter (initially contribute by Javier Velilla).
Jocelyn Fiat2017-03-30 11:58:44 +02:00
134f876e62
Display the full url for uploaded files via the CMS_FILES_MODULE. Keep db/mails in checkout.
Jocelyn Fiat2017-03-28 22:26:21 +02:00
307a87eaf4
Better handling of path or location for administration links.
jocelyn2017-03-24 21:56:48 +01:00
5ca9a0cd85
Merge branch 'master' into es17.01
jocelyn2017-03-24 18:44:49 +01:00
21e75a6492
Splitted administration and normal web site interfaces. This optimises a bit the routing map, and make cleaner separation. Make the base url for admin pages customizable via administration.base_path variable in cms.ini note: could be /admin, /roc-admin, or .. It is possible to have a specific theme for administration via the variable "administration.admin"
jocelyn2017-03-24 18:38:58 +01:00
13cbb7d987
Fixed code by checking for file existence before checking if this is a directory.
jocelyn2017-03-22 10:26:36 +01:00
dbfe14e77e
Fixed cms execution initialization (avoid setting up twice router and filter).
jocelyn2017-03-17 11:21:21 +01:00