summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-01-31Avoid CSRF in users CSV importFrédéric Guillot
2019-01-30Update unit testsFrédéric Guillot
2019-01-30Avoid XSS in pagination orderingFrédéric Guillot
2019-01-30Disable by default plugin installerFrédéric Guillot
- There is no code review or any approval process to submit a plugin. - Anyone can submit a backdoor as plugin. - This is up to the Kanboard instance owner to validate if a plugin is legit.
2019-01-30Do not show projects dropdown when prompting the 2FA codeFrédéric Guillot
2019-01-30Always returns a 404 otherwise people might guess which user existFrédéric Guillot
2019-01-30Check if user role has changed while the session is openFrédéric Guillot
2019-01-30Add missing CSRF check in TwoFactorController::deactivate()Frédéric Guillot
2019-01-28Fix pt_br translation typorafacamargo123
2019-01-19Fix PHP error in task views (tag colors)Cyboulette
2019-01-11Hide edit button when user cannot edit taskRafael de Camargo
Check for custom roles to show edit button Fixes #4123
2019-01-10Fix permission check before "Assign to me"Rafael de Camargo
Users who should not be able to change assignee cannot "assign to me" Fixes #4121
2019-01-08Fix permission check to show project optionsrafacamargo123
Fixes #4105
2019-01-05Fix assignable users on a group with a custom rolerafacamargo123
Groups custom roles are now handled the same ways users custom roles are.
2018-12-27Fix import of automatic actions when parameters are "unassigned" or "no ↵rafacamargo123
category"
2018-12-26Update pt_BR translationsrafacamargo123
2018-12-26Update da_DK translationsOle Carlsen
2018-12-26Update Chinese translationsrenothing
2018-12-20Limit assignee drop-down selector scopeMiodrag Tokić
On the task details page "Add a sub-task" pop-up modal contains drop-down (the SELECT HTML element) with "form-user_id" as the `name` and the `id` attribute value. This element is in conflict with another, hidden INPUT element with the same `name` and the `id` value. This causes an issue where clicking the "Me" (Assignee) link / shortcut (A) element doesn't select your name in the Assignee SELECT element. Avoiding conflict by changing the SELECT element `id` value is not possible as the SELECT element is generated using `FormHelper::select()` function which uses the same value for attribute `name` and `id`. Given the assignee shortcut feature is used only in two places: edit task and edit sub-task dialog, the simplest solution is to select the closest SELECT element to the link / shortcut (A) element or limit the scope to the currently opened dialog. This fix uses the latter approach by limiting the scope of targeted selector.
2018-12-19Update ChangeLogFrédéric Guillot
2018-12-19Update SQL dumpsFrédéric Guillot
2018-12-19Added priority,swimlane,column values from parent task to task converted ↵Fejer Peter
from sub task
2018-12-18Update and sync translationsFrédéric Guillot
2018-12-11Add sorting by reference in list viewAI3Zakir
2018-12-07Update Dockerfile : add php7-bcmathjon r
See #4093 for rationale.
2018-12-03Update Norwegian to 100%eagleofnorth
2018-12-01Add remove() to Settings ModelCraig Crosby
2018-11-28Add hook to Board SettingsCraig Crosby
2018-11-27Disable php_uname() warningBen RUBSON
2018-11-20Add link to new forumFrédéric Guillot
2018-11-08New automatic action: move the task to another swimlane when assigned to a userMarcin
2018-11-08Add the locale en_GBRichard Levitte
2018-10-31Fix postgres schema version + move to separate linestrendspotter
2018-10-31Fix custom roles duplicationMatteo Mazza
The source_column_id and destination_column_id are searched into the correct project: the newly created one.
2018-10-27Adding more hyphens to German translationStephan Fischer
Made some strings more consistent.
2018-10-25Fix typoBalázs Úr
2018-10-25Add ordering comments by id along with creationrafacamargo123
Order comments correctly when they are added on the same second.
2018-10-25Register action assign category based on swimlaneInterleaved
2018-10-25Assign category based on swimlane changeInterleaved
2018-10-25Register new swimlane action in action managerInterleaved
2018-10-25Add action for moving a task to swimlane based on category changeInterleaved
2018-10-23Fix broken link to contributor pageFrédéric Guillot
Fixes #4052
2018-10-23Revert "Easier closing of dialogs" (introduces regression on date time picker)Frédéric Guillot
This reverts commit 71630aaa77b518d3d0165f772251f09cc249f015.
2018-10-15Redirect to board view of the current task after duplicationMichael Vickers
2018-10-15Auto link tasks created from a subtaskMichael Vickers
2018-10-15Auto link duplicated project tasksMichael Vickers
2018-10-15Auto link duplicated tasksMichael Vickers
2018-10-15Easier closing of dialogsMichael
Allow closing of dialogs by clicking on the background area around it. When the dialog is closed in this manner, if it contains a form with changed data present a warning that there are unsaved changes. Likewise if the user attempts to navigate away from the page, eg page reload, bookmark click, address bar entry. If the dialog does not contain a form or the data remains unchanged no warning messages are shown.
2018-10-15Write log entry on file removalMichael
2018-10-10Update ChangeLog and MySQL dumpFrédéric Guillot