Raphael Michel
17e09c601e
Revoke + Logging
2018-09-25 10:28:07 +02:00
Raphael Michel
7860d690fa
Add endpoints to update, roll and revoke devices
2018-09-25 10:28:07 +02:00
Raphael Michel
6d01c99d38
Auth mechanism
2018-09-25 10:28:07 +02:00
Raphael Michel
ddb645aeea
Creating device objects
2018-09-25 10:28:07 +02:00
Raphael Michel
ccddd2a96f
Activate passbook by default if installed
2018-09-21 16:54:22 +02:00
Raphael Michel
6e14592c78
Delete check-ins when deleting a check-in list
2018-09-19 15:41:49 +02:00
Raphael Michel
5b5025c776
Allow to manually revert check-ins on a check-in list
2018-09-11 15:21:22 +02:00
Raphael Michel
087ceb3687
Fix waiting list widgets with infinite quotas
2018-09-04 13:59:40 +02:00
Raphael Michel
678a936897
Fix #999 -- Clarify definition of overpaid
2018-09-03 16:30:23 +02:00
Raphael Michel
7c72ca089b
Do not allow to mark an order as unpaid
2018-09-03 15:41:18 +02:00
Raphael Michel
21530f315f
Properly restrict refunds to full payment amount
2018-09-03 15:41:05 +02:00
Raphael Michel
7274905a92
Ensure correct order of refund log
2018-09-03 15:25:28 +02:00
Lukas Bockstaller
a643abe293
Prevent email enumeration ( #1000 )
...
Here is my attempt to prevent user enumeration.
I've made the following changes:
**Application:**
- replaces success and failure messages in the form with two (with/without redis) information messages
- adds logging for attempted password resets of unknown users
- adds logging for failing emails
**Tests:**
- test_unknown asserts a redirect instead of a ok
- adds test_email_reset_twice_redis to assert the correct logging of a twice reset email
- adds a FakeRedis class similiar to the one implemented in test_metrics.py. I could refactor them into the testutils folder if prefered.
Please excuse the commit mess. I am currently fighting with my tooling.
2018-08-31 10:28:39 +02:00
Felix Rindt
8183648902
Rename module async to tasks ( #994 )
...
Fixes #993
2018-08-21 10:53:40 +02:00
Raphael Michel
625ef3da8a
Round decimal on dashboard
2018-08-19 15:09:59 +02:00
Raphael Michel
4db4790270
Custom HTML email renderers and new email style ( #991 )
...
* Custom HTML email renderers
* Move inline_css call
* Small fixes
* New HTML mail style for pretix
* Thumbs
* Inlinestyle for notifications
* Documentation
* Set line-height
2018-08-16 12:01:23 +02:00
Raphael Michel
248b94c296
Approvals
2018-08-14 10:46:55 +02:00
Raphael Michel
bd48112bf9
Refs #710 -- Remove monkeypatch for django-hijack
2018-08-08 09:24:52 +02:00
Raphael Michel
c702814203
Do not use deepcopy on models
2018-08-07 15:45:22 +02:00
Raphael Michel
0c0172a0b6
Fix inconsistent checks in order offsetting
2018-08-07 15:45:22 +02:00
Raphael Michel
97012082de
Fix #972 -- Clarify sum in quota detail
2018-08-07 12:34:35 +02:00
Raphael Michel
67897dfcc0
Fix #406 -- Allow moving waiting list entries to the top or bottom
2018-08-07 10:53:07 +02:00
Raphael Michel
0100604798
Allow to download waiting list
2018-08-07 10:38:26 +02:00
Raphael Michel
47afe01721
Improve waiting list filters
2018-08-07 10:28:37 +02:00
Raphael Michel
f4be90fdd0
Fix overpaid queries
2018-08-06 16:16:19 +02:00
Raphael Michel
afd766999c
Upgrade to Django 2.1 ( #710 )
...
* Upgrade to Django 2.0
* more models
* i18n foo
* Update setup.py
* Fix Sentry exception PRETIXEU-JC
* Enforce slug uniqueness
* Import sorting
* Upgrade to Django 2.1
* Travis config
* Try to fix PostgreSQL failure
* Smaller test matrix
* staticfiles→static
* Include request in all authenticate() calls
2018-08-06 12:48:46 +02:00
Raphael Michel
18a378976b
Fix #571 -- Partial payments and refunds
2018-08-06 12:24:36 +02:00
Raphael Michel
24739e1638
Hide waiting list vouchers in voucher list
2018-07-29 15:39:31 +02:00
Raphael Michel
beddf1c772
Fix event meta deletion
2018-07-19 09:43:40 +02:00
Raphael Michel
d2a3ba182b
Fix KeyError when accessing settings for disabled payment provider
2018-07-19 09:32:08 +02:00
Raphael Michel
a43ee054ad
Fix logging of file upload questions
2018-06-25 12:53:45 +02:00
Raphael Michel
180904cdc2
Fix KeyError
2018-06-11 14:29:29 +02:00
Raphael Michel
b4d97d9432
Add signal for new OAuth applications
2018-06-05 15:47:13 +02:00
Raphael Michel
69d10489b8
Implement OAuth2 provider ( #927 )
...
- [x] Application management
- [x] Link
- [ ] Tests
- [x] Authorize flow
- [x] Tests
- [x] Refresh token handling
- [x] Tests
- [x] Revocation endpoint
- [x] Tests
- [x] Mitigate: https://github.com/jazzband/django-oauth-toolkit/issues/585
- [x] API authenticator / permission driver
- [x] Test
- [x] Enforce organizer restriction
- [x] Tests
- [x] Enforce scope restriction
- [x] Tests
- [x] Show current applications to user
- [x] Revoke
- [x] Tests
- [x] Log new authorizations
- [x] notify user
- [x] Ensure other grant types are not available
- [x] Documentation
- [x] check if revoking access toking, then refreshing gets rid of organizer constraint
- [x] Show logentry foo
2018-06-05 12:58:04 +02:00
Raphael Michel
50ff3628f7
Add success hook for settings form
2018-06-04 17:59:11 +02:00
Raphael Michel
85420602e8
Fix #54 -- Allow the admin to force accept payments
2018-06-01 13:25:07 +02:00
Raphael Michel
6ccf55b601
Fix settings form validation
2018-06-01 13:21:13 +02:00
Raphael Michel
3030c300f2
Fix order change form with required field
2018-05-31 12:57:06 +02:00
Raphael Michel
bbb78aa5e6
Refs #928 -- Allow to regenerate secrets of specific tickets
2018-05-31 12:57:06 +02:00
Mason Mohkami
479a7d9162
Fix #357 -- Implement go to for vouchers ( #849 )
...
* Add Go input for vouchers on the vouchers list page (#357 )
* Final fixes
2018-05-31 12:43:32 +02:00
Raphael Michel
86117091fe
Refs #66 -- Fix crash when payment provider plugin is disabled
2018-05-28 16:17:32 +02:00
Raphael Michel
60a3f21857
Fix error in voucher CSV export
2018-05-28 16:17:32 +02:00
Raphael Michel
6ecddfc6c0
Automatically re-render PDF for files lost due to bug
2018-05-28 11:44:15 +02:00
Jakob Schnell
1689925508
Fix #707 -- Setup automated spell-checking for translations ( #896 )
...
This will:
* set up potypo
* add wordlists, edgecases and phrases
* fix english typos across the codebase
* fix german typos and translation
2018-05-27 11:59:10 +02:00
Felix Rindt
ab67eea36e
Fix bug in date/time question stats ( #916 )
...
Fix bug in date/time question stats
2018-05-18 22:51:11 +02:00
Raphael Michel
edeaa1333b
Fix #473 -- Internal name for categories and products ( #900 )
...
* Fix #473 -- Internal name for categories and products
* fix pdf renderer
2018-05-11 12:53:25 +02:00
Raphael Michel
0a9aeca3bc
Bulk deletion for subevents
2018-05-09 11:13:34 +02:00
Raphael Michel
7bccd62a4f
Fix #678 -- Data shredders for personally identifiable information ( #817 )
...
* Add data shredders for PII
* First working shredder
* Add more shredders
* Add new shredders and download confirmation
* tmp
* PayPal, Stripe, banktransfer
* Add icon to logs
* Untested payment log shredders
* Add waiting list shredder
* First tests
* Add tests for shredders
* Improve templats, link to shredder
* Test payment info shredders
* More tests
* Documentation
* Fix enabled flag in payment provider overview
* Fix minor issues
2018-05-02 15:59:59 +02:00
Raphael Michel
6f30ecb365
Refs #654 -- Writable API methods for waiting list entries ( #885 )
...
* Refs #654 -- Writable API methods for waiting list entries
* Update test_waitinglist.py
2018-04-29 14:28:32 +02:00
Raphael Michel
97bf958b74
Allow to re-auth by using the U2F token
2018-04-26 20:24:03 +02:00