Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Changed GET /api/boards/:id to allow access by the normally also allowed users. | mayjs | 2017-05-15 | 1 | -2/+5 |
| | |||||
* | Fixed a typo and removed an old todo comment | mayjs | 2017-05-15 | 1 | -2/+2 |
| | |||||
* | Changed /api/user/boards to only check if the user is logged in | mayjs | 2017-05-15 | 1 | -1/+1 |
| | |||||
* | let -> const | mayjs | 2017-05-15 | 1 | -1/+1 |
| | |||||
* | Removed old debug output | mayjs | 2017-05-15 | 1 | -1/+0 |
| | |||||
* | Fixed the errors existing in /api/user/boards | mayjs | 2017-05-15 | 1 | -8/+15 |
| | |||||
* | Added /api/user/boards | Johannes May | 2017-05-13 | 1 | -0/+12 |
| | |||||
* | add token authentication, only admin can use api | huneau romain | 2017-05-11 | 1 | -0/+4 |
| | |||||
* | REST API - Meteor 1.4 - first step issue | Lauri Ojansivu | 2017-04-27 | 1 | -22/+79 |
| | |||||
* | hotfix to user add | Ryan Helsing | 2017-03-29 | 1 | -0/+1 |
| | |||||
* | ability to store comment only, actual prevention next | Ryan Helsing | 2017-03-18 | 1 | -1/+10 |
| | |||||
* | Improve wekan performance (checklist collection scan) | Alexis LACROIX | 2017-02-22 | 1 | -3/+1 |
| | |||||
* | Improve wekan performance #837 | maulal | 2017-02-22 | 1 | -0/+3 |
| | |||||
* | Fix typos, thanks to umbertooo | Lauri Ojansivu | 2017-02-01 | 1 | -1/+1 |
| | |||||
* | Models: Remove board from starred list | Alexander Sulfrian | 2016-08-16 | 1 | -0/+12 |
| | | | | | | This will fix the starred counter. If the board is not public, the user is unable to see the board and remove it from the list of starred boards. | ||||
* | Models: Remove user from all objects on board leave (Fixes: #667) | Alexander Sulfrian | 2016-08-16 | 1 | -0/+36 |
| | | | | | Remove the user as member and watcher of all lists, cards and the board itself when leaving the board. | ||||
* | Models: Fix remove member activity | Alexander Sulfrian | 2016-08-16 | 1 | -11/+23 |
| | | | | | | The member is only set to inactive, so we could not test for $pull. Instead we have to look into the $set modified and check whether the member was deactivated. | ||||
* | models: Remove wrong line (fix #650) (#651) | Alexander Sulfrian | 2016-07-21 | 1 | -1/+0 |
| | |||||
* | Models: Replace before.insert with autoValues | Alexander Sulfrian | 2016-06-03 | 1 | -37/+72 |
| | | | | | | | | The before.insert hooks have the problem, that they are executed in a different order if called from the client or from the server. If called from the client, the before.insert hook is called before validation of the schema, but if called from the server, the validation is called first and fails. | ||||
* | Upgrade ESLint to v2 | Maxime Quandalle | 2016-03-17 | 1 | -2/+6 |
| | | | | This commit also tweak the code style following backward-incompatible v2 rules. | ||||
* | Add notification, allow watch boards / lists / cards | Liming Xie | 2016-01-05 | 1 | -1/+1 |
| | |||||
* | Export: improved API routes | Xavier Priour | 2015-12-17 | 1 | -1/+1 |
| | | | | | | - use an explicit "boards" domain: /api/boards/:boardId - pass authToken as a request parameter: /api/boards/:boardId?authToken=:token - in the future, same route can be used with authToken set in the Authenticate: header easily | ||||
* | Export Wekan now server-based with proper auth | Xavier Priour | 2015-12-16 | 1 | -3/+3 |
| | |||||
* | Merge remote-tracking branch 'upstream/devel' into devel | Xavier Priour | 2015-12-13 | 1 | -32/+27 |
|\ | |||||
| * | bugfix: only care active members, also optimize some code | floatinghotpot | 2015-12-08 | 1 | -32/+27 |
| | | |||||
* | | board export now checks authentication | Xavier Priour | 2015-12-13 | 1 | -0/+27 |
|/ | |||||
* | add: optional board description | floatinghotpot | 2015-12-07 | 1 | -0/+8 |
| | |||||
* | add: invite user via email, invited user can accept or decline, allow member ↵ | floatinghotpot | 2015-12-07 | 1 | -19/+67 |
| | | | | to quit | ||||
* | Upgrade Meteor to 1.2.1-rc4 | Maxime Quandalle | 2015-10-23 | 1 | -2/+2 |
| | | | | | | This version includes a more complete selection of ES2015 polyfills that I started used across the code base, for instance by replacing `$.trim(str)` by `str.trim()`. | ||||
* | Prefer ES5 methods over underscore utilities | Maxime Quandalle | 2015-10-22 | 1 | -1/+1 |
| | | | | | | | | | | | | | | Since 07cc454 (ie the switch to Meteor 1.2) we includes the `es5-shim` polyfill to support methods like `Array.prototype.forEach` in a consistent way across all supported browsers (IE8+). MDG recently released a blog post recommending the use of these native methods instead of underscore [0]. We know follow this recommendation. This commit also favor some ES6 features (argument defaults, destructing assignment) in places where we didn’t use them. [0]: http://info.meteor.com/blog/es2015-get-started | ||||
* | Merge branch 'xavierpriour-devel' into devel | Maxime Quandalle | 2015-10-20 | 1 | -0/+8 |
|\ | | | | | | | | | Conflicts: models/import.js | ||||
| * | Import board: map team permission, and refactor code to share with card import | Xavier Priour | 2015-10-19 | 1 | -0/+8 |
| | | |||||
* | | Re-implement label deletion | Maxime Quandalle | 2015-10-20 | 1 | -1/+1 |
| | | | | | | | | | | | | This was not ported during v0.9 re-factor. Fixes #322 | ||||
* | | Prevent duplicate board labels | Maxime Quandalle | 2015-10-16 | 1 | -18/+15 |
|/ | | | | | | 43de3b8 did prevent empty labels with the same color, but we also want to prevent label with the same non-empty name and same color because the rationale is identical. | ||||
* | Prevent dublicated empty labels of the same color | Maxime Quandalle | 2015-10-14 | 1 | -5/+14 |
| | |||||
* | Import single card: map labels | Xavier Priour | 2015-10-14 | 1 | -2/+8 |
| | |||||
* | Centralize all mutations at the model level | Maxime Quandalle | 2015-09-08 | 1 | -0/+348 |
This commit uses a new package that I need to document. It tries to solve the long-standing debate in the Meteor community about allow/deny rules versus methods (RPC). This approach gives us both the centralized security rules of allow/deny and the white-list of allowed mutations similarly to Meteor methods. The idea to have static mutation descriptions is also inspired by Facebook's Relay/GraphQL. This will allow the development of a REST API using the high-level methods instead of the MongoDB queries to do the mapping between the HTTP requests and our collections. |