Commit graph

30 commits

Author SHA1 Message Date
Lance Edgar cdaf36f346 Rename 'forms2' package, templates to 'forms' 2018-02-11 22:57:33 -06:00
Lance Edgar ec438ead51 Refactor user login, change password to use colander/deform 2018-02-10 16:47:53 -06:00
Lance Edgar 9beb32cea2 Fix mobile logout behavior 2018-01-29 18:07:29 -06:00
Lance Edgar 941ce1a9cb Record become/stop root user events 2017-08-05 16:11:56 -05:00
Lance Edgar 5b35c3dd3b Make login template use same logo as home page 2017-07-31 13:58:38 -05:00
Lance Edgar 581ced2990 Switch license to GPL v3 (no longer Affero)
refs #2
2017-07-06 23:47:56 -05:00
Lance Edgar 8014e60d14 Add webhelpers2 dependency, use it for most things
still using webhelpers for certain things yet, hopefully can get rid of that soon
2017-07-06 20:13:42 -05:00
Lance Edgar 97aa17f64d Add logic to core View class, to force logout if user becomes inactive
Also, expose "active sticky" field for user views
2017-03-27 21:37:45 -05:00
Lance Edgar 581a21bd9d Add basic "mobile index" master view, plus support for demo mode 2017-03-19 11:21:00 -05:00
Lance Edgar e3ec3be03b Add support for client-side session timeout warning 2017-02-16 13:32:20 -06:00
Lance Edgar b90f5c8a3a Redirect to login page when Forbidden happens with anonymous user 2017-02-13 16:22:20 -06:00
Lance Edgar ca4d15f06c Refactor logic used to login a user, for easier sharing 2017-02-11 17:08:27 -06:00
Lance Edgar 61b3daa701 Add config for redirecting user to home page after logout 2017-02-11 01:48:55 -06:00
Lance Edgar b2e21b8e74 Add basic support for per-user session timeout 2017-02-02 21:44:13 -06:00
Lance Edgar 4659d3473b Let project override user authentication for login page 2017-02-02 16:50:38 -06:00
Lance Edgar ab09314ed3 Add initial support for CSRF token protection 2016-12-14 15:41:15 -06:00
Lance Edgar 7f14f50ee0 More mobile view improvements, various 2016-12-12 15:24:26 -06:00
Lance Edgar ee0bdc4b74 OMG..lots of changes for sake of mobile login / user menu etc.
Feeling a bit sloppy right about now...oh well good enough
2016-12-11 18:07:30 -06:00
Lance Edgar 7932fffa1a Protect new 'root' views, only admin users allowed..
Heh whoops.
2016-10-18 19:17:23 -05:00
Lance Edgar 2c27120eb4 Update references to request.authenticated_userid
Per warnings from Pyramid, old method will go away in 1.8
2016-10-18 17:54:41 -05:00
Lance Edgar 6bf60365ba Let any 'admin' user elevate to 'root' for full system access
But otherwise, let the Administrator role be "normal" and have perms of
its own.  Hopefully cuts down on unwanted screen noise for admins.
2016-10-18 16:59:38 -05:00
Lance Edgar d698bef608 Don't show flash message when user logs in.
That just seems more annoying to me, somehow..
2015-08-08 13:58:16 -05:00
Lance Edgar a7ecf445db Fix login redirect if referrer is not internal to site. 2015-03-05 16:55:09 -06:00
Lance Edgar d296b5bde5 Fix login so user is sent to their target page after authentication. 2015-03-05 16:19:38 -06:00
Lance Edgar 8bf292ebac Remove some more edbob cruft. 2014-11-18 23:00:24 -06:00
Lance Edgar 8cf5605e8e Remove some edbob references. 2014-06-12 22:07:34 -07:00
Lance Edgar 62a0b67502 Added forbidden view. 2013-09-20 20:17:59 -07:00
Lance Edgar 857a4b88e5 Fixed change password template/form. 2013-09-10 20:37:19 -07:00
Lance Edgar 7d19700c3c More standalone operation stuff.
Stop using `edbob.db.engine`, stop using all edbob templates, etc.
2013-09-01 20:25:34 -07:00
Lance Edgar 2a50e704ef Major overhaul for standalone operation.
This removes some of the `edbob` reliance, as well as borrowing some templates
and styling etc. from Dtail.
2013-09-01 15:31:50 -07:00