Commit Graph
78 Commits
Author SHA1 Message Date
Olivier Dony fb31330451 [FIX] auth_signup: correct leftover from 6d16915d39
The /web/signup controller was also supposed to get the special frame
header, like all sign-in/up pages.
2018-07-26 23:48:58 +02:00
Olivier Dony 9b3ca1af23 [MERGE] Forward-port 10.0 up to 1545995b39 2017-05-16 12:12:30 +02:00
Olivier Dony 6921da00b3 [FIX] auth_signup: properly log password reset requests 2017-05-05 17:02:46 +02:00
Olivier Dony 6d16915d39 [FIX] web: no frames on login/preferences screen
We generally consider this a low priority issue
as it is social-engineering based and many easier
options exist for targeting gullible users.
Nevertheless, protecting a couple of obvious pages
does not hurt.
2017-03-27 18:47:45 +02:00
Raphael Collet d0ca2d115e [REF] ir_config_parameter: remove group_ids and simplify
Add `sudo()` to call `get_param` where necessary, and make the web client use a
controller instead of directly accessing parameters.
2017-01-03 16:52:49 +01:00
Raphael Collet 7543afb070 [IMP] base, *: tighten ir.config_parameter access rights
Add `base.group_system` on existing parameters:
 - `auth_signup.allow_uninvited`,
 - `auth_signup.reset_password`,
 - `auth_signup.template_user_id`,
 - `google_redirect_uri`,
 - `mail.bounce.alias`,
 - `mail.catchall.alias`,
 - `mail.catchall.domain`.
2017-01-03 16:52:49 +01:00
Christophe Simonis 321b7dc5b6 [MERGE] forward port branch 9.0 up to 9c8422a 2016-12-09 15:09:36 +01:00
Christophe Simonis 9c8422a405 [MERGE] forward port branch saas-6 up to 75e7f0d 2016-12-09 15:07:00 +01:00
Christophe Simonis 75e7f0da10 [MERGE] forward port branch 8.0 up to 5ece76b 2016-12-09 15:04:42 +01:00
sergiov 4792a669d3 [FIX] auth_signup: display full error message
When the user name entered hasn't an email specified the error message wasn't
displayed in the reset view.
The error message was in e.name, not e.message
2016-12-09 14:32:16 +01:00
Christophe Simonis 78d20b552b [MERGE] forward port of branch saas-8 up to 7e44ddc 2016-01-27 12:24:04 +01:00
Martin Trigaux bb56e484b7 [FIX] all: construction of translations lookup
When evaluated, the translation function never finds a match if a variable is
integrated into the untranslated text.

SHAME! 🔔 🙋
2016-01-13 14:46:30 +01:00
Christophe Simonis 4852d6033d [MERGE] forward port of branch saas-8 up to 99b6cd8 2016-01-07 18:21:13 +01:00
Martin Trigaux 8b4f052a38 [MERGE] Forwardport of branch saas-6 up to c649bb0df 2016-01-05 18:28:06 +01:00
Martin Trigaux 955ed51687 [MERGE] Forwardport of branch 8.0 up to 6efc3712 2015-12-30 11:48:14 +01:00
Jairo Llopis 5425316eff [FIX] auth_signup: no SQL error for duplicated user
In case of registration with an already existant user, an SQL error 'duplicate
key value violates unique constaint res_users_login_key...'
Replace by a more user friendly error.

Fixes #10068, opw 659913
2015-12-16 14:16:49 +01:00
Kinjal Mehta 416903d1b9 [MIG] auth_signup: Migrated into new api. 2015-12-16 13:39:41 +01:00
Kinjal Mehta 327de507a7 [MOVE] auth_signup: Moved files in related models and views directory. 2015-12-16 12:20:41 +01:00
Martin Geubelle 65d0faca4d [IMP] auth_signup: reset password form
* Hide 'back to login' when there is a token
* Hide the form when the token is invalid
2015-11-17 13:01:08 +01:00
Denis Ledoux 603dc8030c [FIX] auth_signup: use request lang on signup if supported
When a user signs up, when the according option is
enabled in the General Settings
`Allow external users to sign up`
Use the request lang (the partner browser lang) to
sign up only if this language is installed
in the database.

opw-654007
2015-11-06 17:23:07 +01:00
Martin Trigaux b6e1e2ec26 [FIX] auth_*: Authentification ain't a word
.. just like "ain't" by the way.

Courtesy of Lionel Sausin
2015-07-14 11:22:44 +02:00
Christophe Simonis a304194936 [MERGE] forward port of branch saas-6 up to 81b5c60 2015-06-25 00:26:31 +02:00
Christophe Simonis 13468c271f [MERGE] forward port of branch 8.0 up to ed3065e 2015-06-18 19:41:31 +02:00
Christophe Simonis 2451dfcee4 [FIX] auth_signup: set request lang to created user. 2015-06-17 14:32:53 +02:00
Olivier Dony 0bd4545348 [LEGAL] Use global LICENSE/COPYRIGHT files, remove boilerplate text
- Preserved explicit 3rd-party copyright notices
- Explicit boilerplate should not be necessary - copyright law applies
  automatically in all countries thanks to Berne Convention + WTO rules,
  and a reference to the applicable license is clear enough.
2015-06-02 03:16:04 +02:00
Leonardo Donelli 4a0b13ed92 [REF] remove vim modelines and resulting trailing blank lines
Let 2015 be a year without modelines!
cf #4174
2014-12-31 15:52:13 +01:00
Fabien Meghazi 8eed143112 [IMP] Invert multilang logic in route decorator. True by default, can be set to False explicitlty 2014-05-13 11:35:45 +02:00
Christophe Simonis d93b79e6f4 [MERGE] forward port of branch saas-3 up to revid 9345 dle@openerp.com-20140324110349-e82t1bmmtjqbl85k
bzr revid: chs@openerp.com-20140324133811-4az1kvbznd26seow
2014-03-24 14:38:11 +01:00
Fabien Meghazi 2ed053642a [IMP] oaut & signup, redirect if already logged in
bzr revid: fme@openerp.com-20140312112141-uvo89w4ovmzq5ozq
2014-03-12 12:21:41 +01:00
Fabien Meghazi 312991ca1e [FIX] ensure_db() on inherited /web/login controllers
bzr revid: fme@openerp.com-20140227164141-1sblr0g6ta66q1em
2014-02-27 17:41:41 +01:00
Fabien Meghazi 152e70e9fa [IMP] seperation of auth_signup's reset password and signup routes
bzr revid: fme@openerp.com-20140227154955-tnxyzw1ynuwlo5mj
2014-02-27 16:49:55 +01:00
Fabien Meghazi 2868e9a6ac [MERGE] upstream
bzr revid: fme@openerp.com-20140227101725-7egd9xq859jasnhj
2014-02-27 11:17:25 +01:00
Fabien Meghazi 35a7182893 [MERGE] upstream
bzr revid: fme@openerp.com-20140225104654-d1ni7z5t8w0qc7mw
2014-02-25 11:46:54 +01:00
Denis Ledoux 4821fad601 [FIX] auth_signup: fix route when mode signup or reset
Do not call super web_login when in mode reset or signup mode, as this is non-sense.

bzr revid: odo@openerp.com-20140219110335-lz7ti2r1dxst36ty
2014-02-19 12:03:35 +01:00
Fabien Meghazi 6f670c58ce [REM] Removed lazy response usage
bzr revid: fme@openerp.com-20140219103032-5pc50taemkc6x0qo
2014-02-19 11:30:32 +01:00
Christophe Simonis c64a762d06 [FIX] auth_signup: correct authentification after successfull signup
bzr revid: chs@openerp.com-20140213190845-azch00bppzp1pk0d
2014-02-13 20:08:45 +01:00
Christophe Simonis 8d5da6b8b4 [FIX] auth_signup: when POSTing signup data, there is always an error in qcontext as default behaviour is trying to login with data (error injected by super() call)
bzr revid: chs@openerp.com-20140211140255-mv84m6fb0sqkflm5
2014-02-11 15:02:55 +01:00
Christophe Simonis cebbede4c6 [FIX] auth_signup: do not shadow errors
bzr revid: chs@openerp.com-20140211132901-o7e8cup1hlc6mxzf
2014-02-11 14:29:01 +01:00
Fabien Meghazi ebb03132a6 [ADD] multilang for auth_signup
bzr revid: fme@openerp.com-20140211132639-wcb2zrm0gnwnja1t
2014-02-11 14:26:39 +01:00
Fabien Meghazi 1d359eab49 [FIX] Use correct uid for rendering and cheat for website
bzr revid: fme@openerp.com-20140211124741-4y2z1szvakcy76tn
2014-02-11 13:47:41 +01:00
Fabien Meghazi b9b42fadd0 [REM] ensure_db() nonsense
bzr revid: fme@openerp.com-20140211112229-9h52fb3zy6g4uo3w
2014-02-11 12:22:29 +01:00
al@openerp.com a3710efdb1 dirty fix for auth_signup
bzr revid: al@openerp.com-20140208004731-atwco93ghwspmlh3
2014-02-08 01:47:31 +01:00
Fabien Meghazi 55c61046b9 [FIX] Do not allow signup and reset_password when no token given and opt-in has not been done in config
bzr revid: fme@openerp.com-20140206091722-xc8dv4whp1eb07z4
2014-02-06 10:17:22 +01:00
Fabien Meghazi bce084bac2 [IMP] Seperate signup and reset into two controllers and templates
bzr revid: fme@openerp.com-20140205183232-fmlin6kiycu6bu0j
2014-02-05 19:32:32 +01:00
Fabien Meghazi 9ffb9d5632 [REM] Removed LoginForm javascript related
bzr revid: fme@openerp.com-20140205092354-oa6qxm0fsuojhuc2
2014-02-05 10:23:54 +01:00
Fabien Meghazi 967c9db196 [FIX] never let me commit in saas-3 again
bzr revid: fme@openerp.com-20140203124516-l8wwu9vdyo2nu2s0
2014-02-03 13:45:16 +01:00
Fabien Meghazi 4bf0284d4b [IMP] Cosmetic change for easier debugging
bzr revid: fme@openerp.com-20140203122300-pduwmt5z5cprehey
2014-02-03 13:23:00 +01:00
Fabien Meghazi e974e1fbea [REM] remove disable_db and ensure_db() from addons
bzr revid: fme@openerp.com-20140130092308-s24a7h2mhzuaasf1
2014-01-30 10:23:08 +01:00
Fabien Meghazi 031523fa5b [FIX] use of http#ensure_db in auth_* modules
bzr revid: fme@openerp.com-20140128211723-3135gyn0raxjz8qc
2014-01-28 22:17:23 +01:00
Christophe Simonis 4a965b96e5 [FIX] auth_signup: +s
bzr revid: chs@openerp.com-20140128142132-skzuuzmkhvsl1sgz
2014-01-28 15:21:32 +01:00