{23} Trac comments (3729 matches)

Results (201 - 300 of 3729)

← 1 2 3 4 5 6 7 8 9 10 11 12 13 →
Ticket Posixtime Author Newvalue
#115 1253091426000000 dread R/W access control of packages added to REST api in cset:a2e0df462427.
#116 1253270921000000 dread Done in cset:683d42238666.
#116 1253709460000000 rgrp Done in cset:df8d7efdcadb and cset:ca1a5a4ef43a
#117 1254735855000000 dread Done in cset:aa1435678eb6
#118 1253784319000000 dread Done in cset:36b586f95e87
#118 1253784902000000 dread Additional change in cset:642d0c4837fa
#119 1253791147000000 dread Done in cset:15566874efe7 We decided that admins could read a non-active package.
#120 1254406544000000 dread Found two security holes, both only in READ access (not write). Tickets raised for holes: ticket:132 - REST listing packages & groups ticket:133 - search package/group (WUI & REST) Full details of files checked: $ find . -name "*.py" | xargs grep "import ckan.model" ./ckan/presentation.py:import ckan.model as model REMOVED - unused ./ckan/tests/functional/test_group_edit_authz.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_rest.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_package.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_user.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_tag.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_group.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_package_edit_authz.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_revision.py:import ckan.model as model - not runtime ./ckan/tests/functional/test_authz.py:import ckan.model as model - not runtime ./ckan/tests/test_search.py:import ckan.model as model - not runtime ./ckan/tests/models/test_package.py:import ckan.model as model - not runtime ./ckan/tests/models/test_user.py:import ckan.model as model - not runtime ./ckan/tests/models/test_group.py:import ckan.model as model - not runtime ./ckan/tests/models/test_extras.py:import ckan.model as model - not runtime ./ckan/tests/models/test_misc.py:import ckan.model as model - not runtime ./ckan/tests/models/test_authz.py:import ckan.model as model - not runtime ./ckan/tests/forms/test_package.py:import ckan.model as model - not runtime ./ckan/tests/forms/test_group.py:import ckan.model as model - not runtime ./ckan/tests/forms/test_authz.py:import ckan.model as model - not runtime ./ckan/tests/test_converter.py:import ckan.model as model - not runtime ./ckan/tests/getdata/test_data4nr.py:import ckan.model as model - not runtime ./ckan/tests/__init__.py:import ckan.model as model - not runtime ./ckan/tests/test_authz.py:import ckan.model as model - not runtime ./ckan/tests/test_purge_revision.py:import ckan.model as model - not runtime ./ckan/forms/common.py:import ckan.model as model - just validator ./ckan/forms/package.py:import ckan.model as model - validator & package edits ./ckan/forms/group.py:import ckan.model as model - validate & package, wui & rest edits ./ckan/forms/authz.py:import ckan.model as model - package & group wui/rest ./ckan/controllers/rest.py:import ckan.model as model - HOLE ticket:132 - REST listing packages & groups ./ckan/controllers/base.py:import ckan.model as model - paginate filters out deleted ones ./ckan/migration/versions/005_add_authorization_tables.py:import ckan.model as model - not runtime ./ckan/getdata/data4nr.py:import ckan.model as model - not runtime ./ckan/lib/search.py:import ckan.model as model - HOLE ticket:133 - search package/group (WUI & REST) ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/cli.py: import ckan.model as model - not runtime ./ckan/lib/converter.py:import ckan.model - dumper, not runtime ./ckan/lib/base.py:import ckan.model as model - just a remove ./ckan/authz.py:import ckan.model as model - only gets roles ./bin/ckan_spam.py:import ckan.models as model - not runtime ./bin/ckan-correct.py:import ckan.models - not runtime ./test_migrate.py:import ckan.model as model - not runtime
#121 1253716782000000 dread Done in cset:f5a762dae878
#122 1253716695000000 dread Done in cset:f5a762dae878
#122 1253716757000000 dread Previous comment was an ERROR! This was actually done in cset:cf62473b8495
#123 1254321447000000 dread This has been done, starting with cset:7d8bada15d88.
#124 1254735558000000 dread Done in cset:687f7be58dcf
#125 1257535181000000 rgrp I think this is done :) -- dread do you want to close this with linked cset?
#125 1258377621000000 dread Duplicate of ticket:152
#126 1254740244000000 dread Done in cset:469b0ed6d682
#127 1253868048000000 dread Done in cset:6e4119b4351c
#128 1260294960000000 dread Done in 57c5b5ed4737 Cost: 30 mins
#128 1275694573000000 Floallgloli Futures Trading Key your Futures education provider Learn how to trade futures with live trading education Futures education and trading free trial live on line room <a href=http://www.futurestradingkey.com><B>Futures</B></a>
#129 1260179292000000 dread Not needed at the moment (minor security issue since only for read actions).
#129 1267719162000000 dread Implementing this would make it less likely that new code would be written to be insecure. But it would also make a lot of things harder. Decided not to do it.
#130 1254735501000000 dread Done in cset:77ff9d3259bd
#131 1254308115000000 dread Done in cset:399e2bf1e14b.
#132 1273254514000000 dread This was fixed before and now works.
#133 1273253977000000 dread WUI and REST interfaces recently updated. You can't read, list or search for packages or groups not-authorised for. The only remaining view of a non-authorised group is that the group is named when viewing a package using all_fields option in REST interface. But no details of other packages in the group are given.
#134 1255430998000000 dread Authorization added in cset:3484c10753e7
#135 1255180858000000 dread * authz/is_sysadmin method now looks up sysadmins in user-role table * SystemRole and System added * migration script for new SystemRole and System * CLI for adding sysadmins Done in cset:94028478608a
#136 1255169466000000 dread Done in cset:fb571c27e04b
#138 1258466054000000 dread Done in cset:bfbd0bb1b91d
#138 1258466074000000 dread Overall cost: 2.25h
#139 1255188974000000 dread I didn't manage to create duplicate tags - must be the old code. I fixed this particular package in ckan.
#140 1257535009000000 rgrp Not sure how useful this is atm
#141 1255007583000000 dread Decision made to put it in a section alongside REST docs at api/index. Search API docs already done in cset:5562b3e53977. Refactored in cset:a096132a6c6b
#142 1256417440000000 rgrp Might be interested here in auto-extracting a nickname from openid (or getting service to give it to us). This question is of relevance on this point: http://stackoverflow.com/questions/572939/extracting-a-username-from-an-openid-identity (though basic answer is "you can't").
#142 1276121257000000 [email protected] See also: http://stackoverflow.com/questions/1355292/friendly-name-from-google-using-openid Looks like Google has made this difficult intentionally.
#142 1289219069000000 pudo Fixed in cset:a3f713368bba pending release of repoze.who.openid==0.5.3
#143 1311181336000000 thejimmyg Baze is looking into this and also into most followed packages.
#144 1257533957000000 rgrp But we don't record views ...
#144 1264439281000000 dread Duplicate of ticket:215
#145 1255434248000000 dread Done in cset:d664c9caeb69.
#146 1281002247000000 pudo After test hasn't reproduced it, let's wait for someone to notice this in production. We can analyze weberror then.
#146 1291829862000000 thejimmyg I've just tested this too and it works for me. Let's close this ticket.
#147 1255515162000000 dread Same as ticket:148
#148 1255515222000000 dread Done in cset:4d6bfca98d97
#149 1257414916000000 dread Done in cset:4d6bfca98d97
#150 1256751974000000 dread Done in cset:4dcb28d339a3
#151 1257414545000000 dread Duplicate of ticket:175
#152 1256056193000000 dread Done in: cset:f57dbb45418e - main work cset:78930cfd01b7 - not requiring values now.
#153 1255621895000000 dread Comment from rgrp: Yes, and want this for tags too -- this involves working out how to order joins in sqlalchemy (shouldn't be too hard).
#153 1258381364000000 dread Cost: 3h with help from rgrp
#153 1258971895000000 dread Duplicate of ticket:195
#154 1255621856000000 dread Comment from rgrp: I don't think we have to prescribe one or the other.
#154 1257535066000000 rgrp Don't think anything obvious to fix at present (and perhaps plan a larger ticket on form customization).
#155 1255621836000000 dread Comments from rgrp: Very reasonable - and should not be too hard to do (bit of javascript and support at the backend ...)
#155 1271760041000000 rgrp Duplicate of ticket:295
#156 1256145730000000 dread Done in cset:8a29d5351650
#156 1258981721000000 dread Looks like it was taking out a lot of stuff.
#156 1261399351000000 dread Sorted display of <links> by converting them to markdown format [links] (links) in cset:9c3e64104cbf
#156 1266348238000000 dread Example problem: http://ckan.net/package/patent-nber
#156 1267373651000000 dread Another example: http://www.ckan.net/package/dbtune
#156 1271962871000000 johnbywater Fixed by encoding elements before and decoding elements after passing text through Markdown engine.
#157 1256062680000000 dread As far as I can tell this never worked in the past. Added in cset:f4ba0dcfb1a3 Cost: .65h
#158 1255949818000000 dread Done in cset:2aaaedff9d60
#159 1256060264000000 dread Fixed in cset:e7ea5b97365e Note: no spaces allowed between search operator and the word associated with the operator. So with "tags: postcode" it was searching for a blank tag. I've made the change so that would ignore 'tags' in this case, producing reasonable search results for postcodes in all fields. postcodes. Cost: 1.5h
#160 1261399380000000 dread Done in 1h in cset:9c3e64104cbf. Not allowing space - non-standard.
#161 1256114485000000 dread Yes, deleted tags are still listed and associated with a package.
#161 1257762932000000 dread Rufus says: Two issues: 1. search -- this has be done in internals ... 2. is: tag.packages attribute -- this is solved by using StatefulList
#161 1258381450000000 dread Cost: 4h with help from rgrp
#161 1258573607000000 rgrp Resolved in cset:6d466d8b702a
#162 1256142462000000 dread Done in cset:429f2c89d4de
#163 1256140829000000 dread Basic facility to do it with CLI command done in cset:a4217353a7be Still need to make it regular.
#163 1257415333000000 dread Facility to do this, pulling packages out of ckan over REST, is here: ckan/lib/ckan-to-talis.py (cset:752f346b47c2) Currently not implementing a cron job to do this regularly.
#164 1256056395000000 dread Done in cset:ab50a8ee0ba3
#164 1264875709000000 rgrp Reopen as now part of semantic.ckan.net
#164 1271251422000000 rgrp This is done in semantic.ckan.net. Docs at http://wiki.okfn.org/ckan/doc/rdf/
#165 1311181391000000 thejimmyg This is more than 6 months old so closing.
#166 1256222093000000 dread Done in cset:bb7566d82b9f. Couldn't get logging going.
#167 1256210109000000 dread Done in cset:7d129fc35e5c
#168 1257414795000000 dread Duplicate of ticket:145
#169 1266928708000000 dread Covered in ticket:253
#170 1256572201000000 dread Done in cset:517d25bc56f3
#171 1297210925000000 rgrp A lot of work on config was done in 0.7 and these refactorings and improvements either fix or render this ticket invalid so marking as fixed.
#172 1256495095000000 rgrp Largely done in cset:f3782c1071cc
#172 1257532331000000 rgrp Done in cset mentioned previously. See: http://knowledgeforge.net/ckan/ckan/doc/
#173 1258543707000000 dread Done in cset:05b1a12c5e71 Cost: 8.25h but only basic fields. e.g. extras not covered, license is not pretty.
#174 1256650986000000 dread Fixed in cset:d13bfdb99282
#175 1257780907000000 dread Migration requires quoting of table names 'user' and 'group' - need SA migrate v0.5.6.
#175 1257847996000000 dread Done in cset:78f04724b875 Cost: 6.5h
#176 1257533003000000 rgrp My suggestion here is that this ticket get taken to okfn-discuss/okfn-help. This isn't a trivial issue. Do we go Debian (must exist in debian and to a name) or PyPI (very flexible, to name + version) route?
#176 1266928721000000 dread Covered in ticket:253
#177 1273050236000000 rgrp Not really relevant to this trac (as outside of CKAN scope) and is duplicate of http://knowledgeforge.net/okfn/tasks/ticket/252 (which is now closed as well!).
#178 1257439349000000 dread First batch of changes for this in cset:b5ef888e44b6. Works in basic way.
#178 1257523544000000 dread Second batch of changes in cset:7d524a92d602. Status: You can import new packages with all package properties using Excel or CSV format. Outstanding: * Validation is displayed poorly. * Overwriting existing packages is warned about, but doesn't work. * Can't add packages to group yet. * Functional tests are only working for the basic case. * Need to centralise package rendering for package controller. Time spent: 13hrs
#178 1257523596000000 dread Expect 1d to finish outstanding features.
#178 1257523668000000 dread Time spent (correction): 20h
#179 1257762996000000 dread Changeset was to solve 'deprecated' messages. See line 46 ff. of changeset.
#179 1258392697000000 dread Done in cset:76e6cd49e503
#179 1258392723000000 dread Cost: 1.5 h
#180 1263373715000000 rgrp Looked through jquery plugins and best I could find was this one: http://addywaddy.github.com/jquery.tagcloud.js/ (http://plugins.jquery.com/project/jquery_tagcloud)
#180 1264439377000000 dread Duplicate of ticket:223
← 1 2 3 4 5 6 7 8 9 10 11 12 13 →
Note: See TracReports for help on using and creating reports.