CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-12 11:07:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,975 Commits 392 Branches 211 Tags
78544cdb30a329dbaed9346107b61b95629bce00
Commit Graph
179 Commits
Author SHA1 Message Date
Raphael Michel 78544cdb30 Implement a strong locking check to avoid race conditions during payment 2019-02-12 16:24:32 +01:00
Raphael Michel 5bfb00db73 Upgrade bs4 and be compatible to latest soupsieve 2019-01-23 09:44:03 +01:00
Raphael Michel d482bc9de0 Prevent accumulation of tax rates when copying events 2019-01-21 10:43:27 +01:00
Maarten van den BergandRaphael Michel bf1e9d47d0 Fix #1111 -- Duplicate voucher warning (#1142) 
Adds a new method to Voucher that selects all distinct orders containing
a position where the Voucher has been used, and changes the Voucher
detail view to use this method for the warning.
 2019-01-21 08:52:31 +01:00
Raphael MichelandGitHub 06eddb2c6d Self-service refund form (#1135) 
* Auto-refund

* Add missing template

* Notification for requested refund

* Model-level tests

* Add front-end tests

* Default to notify
 2019-01-18 17:24:42 +01:00
Raphael MichelandGitHub 60c1ea8aad Allow to keep cancellation fees (#1130) 
* Allow to keep cancellation fees

* Add tests and clarifications

* Add API
 2019-01-11 15:42:33 +01:00
Raphael MichelandGitHub 8abfbba9d0 Refactor cancelling positions and orders in the data model (#1088) 
- [x] Data model
- [x] display in order view in backend
- [x] review all usages of OrderPositions.objects
- [x] review all usages of order.positions
- [x] review all other model usages
- [x] review plugins
- [x] plugins backwards-compatible API?
- [x] decide on way forward for REST API
- [x] need to cancel fees
- [x] tests
- [ ] plugins
  - [ ] gdpr
  - [ ] reports
- [x] docs
 2019-01-10 16:52:34 +01:00
Raphael Michel 3c57895101 Don't mark orders as pending unnecessarily 2019-01-03 09:50:56 +01:00
Raphael Michel dc9a82cade Fix failing tests for previous commits 2018-12-04 15:02:16 +01:00
Raphael Michel b93e7fcb60 Fix #1067 -- Allow to manually create partial payments 2018-12-02 18:32:16 +01:00
Raphael MichelandGitHub b4290384e1 Add sales channels (#1103) 
- [x] Data model
- [x] Enforce constraint
- [x] Filter order list
- [x] Set channel on created order
- [x] Products API
- [x] Order API
- [x] Tests
- [x] Filter reports
- [x] Resellers
- [ ] deploy plugins
  - [ ] posbackend
  - [ ] resellers
  - [ ] reports
- [x] Ticketlayouts
- [x] Support in pretixPOS
 2018-11-23 15:35:09 +01:00
Raphael Michel aee44a3284 Fix marking an overpaid order as paid manually 2018-11-20 10:39:48 +01:00
Raphael Michel 7528bfb10b Fix tests for color saving 2018-11-13 14:15:52 +01:00
Raphael Michel 31cec76809 Generate invoice after expired order is extended 2018-11-12 13:08:12 +01:00
oocfandRaphael Michel b658c73c19 Removed permissions page from events settings (#1063) 
* Removed old configuration for events settings

* Urls file to remove permissions file

* Removing not needed test

* Removing test in permissions
 2018-11-12 12:23:40 +01:00
Raphael MichelandGitHub c2d03f5e6b Fix #526 -- Add a webhook system (#1073) 
- [x] Data model
- [x] UI
- [x] Fire hooks
- [x] Unit tests
- [x] Display logs
- [x] API to modify hooks
- [x] Documentation
- [x] More hooks!
 2018-11-08 16:38:05 +01:00
Raphael MichelandGitHub 94be46ffdb Fix #978 -- Allow to split names (#1049) 
- [x] attendee names
- [x] Invoice address names
- [x] Data migration
- [x] API serializers
  - [x] orderposition
  - [x] cartposition
  - [x] invoiceaddress
  - [x] checkinlistposition
- [x] position API search
- [x] invoice API search
- [x] business/individual required toggle
- [x] Split columns in CSV exports
- [x] ticket editor
- [x] shredder
- [x] ticket/invoice sample data
- [x] order search
- [x] Handle changed naming scheme
- [x] tests
- [x] make use in:
  - [x] Boabee
  - [x] Certificate download order
  - [x] Badge download order
  - [x] Ticket download order
- [x] Document new MySQL requirement
- [x] Plugins
 2018-11-05 15:43:21 +01:00
Raphael Michel 16983826fb Allow to store structured invoice addresses 2018-10-24 01:37:18 +02:00
Raphael Michel f848561d25 Expose log details for admins 2018-10-01 14:13:44 +02:00
Raphael Michel ec58ab07b6 Add tests for control 2018-09-25 10:28:07 +02:00
Raphael Michel 5b5025c776 Allow to manually revert check-ins on a check-in list 2018-09-11 15:21:22 +02:00
Raphael Michel 7c72ca089b Do not allow to mark an order as unpaid 2018-09-03 15:41:18 +02:00
Raphael Michel 21530f315f Properly restrict refunds to full payment amount 2018-09-03 15:41:05 +02:00
Lukas BockstallerandRaphael Michel a643abe293 Prevent email enumeration (#1000) 
Here is my attempt to prevent user enumeration. 
I've made the following changes:

**Application:**
- replaces success and failure messages in the form with two (with/without redis) information messages 
- adds logging for attempted password resets of unknown users
- adds logging for failing emails

**Tests:**
- test_unknown asserts a redirect instead of a ok
- adds test_email_reset_twice_redis to assert the correct logging of a twice reset email 
- adds a FakeRedis class similiar to the one implemented in test_metrics.py. I could refactor them into the testutils folder if prefered. 

Please excuse the commit mess. I am currently fighting with my tooling.
 2018-08-31 10:28:39 +02:00
Raphael Michel f60a99c357 Tests 2018-08-14 11:31:41 +02:00
Raphael Michel 248b94c296 Approvals 2018-08-14 10:46:55 +02:00
Raphael Michel c702814203 Do not use deepcopy on models 2018-08-07 15:45:22 +02:00
Raphael Michel 67897dfcc0 Fix #406 -- Allow moving waiting list entries to the top or bottom 2018-08-07 10:53:07 +02:00
Raphael Michel 47afe01721 Improve waiting list filters 2018-08-07 10:28:37 +02:00
Raphael MichelandGitHub afd766999c Upgrade to Django 2.1 (#710) 
* Upgrade to Django 2.0

* more models

* i18n foo

* Update setup.py

* Fix Sentry exception PRETIXEU-JC

* Enforce slug uniqueness

* Import sorting

* Upgrade to Django 2.1

* Travis config

* Try to fix PostgreSQL failure

* Smaller test matrix

* staticfiles→static

* Include request in all authenticate() calls
 2018-08-06 12:48:46 +02:00
Raphael Michel 18a378976b Fix #571 -- Partial payments and refunds 2018-08-06 12:24:36 +02:00
Raphael MichelandGitHub 69d10489b8 Implement OAuth2 provider (#927) 
- [x] Application management
  - [x] Link
  - [ ] Tests
- [x] Authorize flow
  - [x] Tests
- [x] Refresh token handling
  - [x] Tests
- [x] Revocation endpoint
  - [x] Tests
  - [x] Mitigate: https://github.com/jazzband/django-oauth-toolkit/issues/585
- [x] API authenticator / permission driver
  - [x] Test
- [x] Enforce organizer restriction
  - [x] Tests
- [x] Enforce scope restriction
  - [x] Tests
- [x] Show current applications to user
  - [x] Revoke
  - [x] Tests
- [x] Log new authorizations
  - [x] notify user
- [x] Ensure other grant types are not available
- [x] Documentation
- [x] check if revoking access toking, then refreshing gets rid of organizer constraint
- [x] Show logentry foo
 2018-06-05 12:58:04 +02:00
Raphael Michel 11ff81f852 Fix 85420602 and add tests 2018-06-01 13:40:08 +02:00
Raphael Michel 0a9aeca3bc Bulk deletion for subevents 2018-05-09 11:13:34 +02:00
Raphael MichelandGitHub 7bccd62a4f Fix #678 -- Data shredders for personally identifiable information (#817) 
* Add data shredders for PII

* First working shredder

* Add more shredders

* Add new shredders and download confirmation

* tmp

* PayPal, Stripe, banktransfer

* Add icon to logs

* Untested payment log shredders

* Add waiting list shredder

* First tests

* Add tests for shredders

* Improve templats, link to shredder

* Test payment info shredders

* More tests

* Documentation

* Fix enabled flag in payment provider overview

* Fix minor issues
 2018-05-02 15:59:59 +02:00
Raphael Michel f7f151d2a9 Fix #767 -- Allow to obtain the list of orders for a question answer 2018-04-23 11:51:28 +02:00
Raphael Michel 187e646fa0 Fix tests and style for last commit 2018-04-13 10:21:49 +02:00
Raphael Michel 9dace592c0 Refs #787 -- Activate 2FA after adding a device by default 2018-04-09 18:48:00 +02:00
Raphael MichelandGitHub 7939503a11 Bulk creation for event series dates (#848) 
* copy-from things

* Some frontend

* rrule UI

* .

* Fixes

* UI improvements

* First test

* Tests
 2018-04-03 18:21:27 +02:00
Raphael MichelandGitHub a284e0c2f7 Add auditable superuser mode (#824) 
* Remove is_superuser everywhere

* Session handling

* List of sessions, relative timeout

* Absolute timeout

* Optionally pseudo-force audit comments

* Fix failing tests

* Add tests

* Add docs

* Rebsae migration

* Typos

* Fix tests
 2018-03-28 14:16:58 +02:00
Raphael MichelandGitHub 28506538a3 Add quick-start assistant for new users (#833) 
* First draft for quick-setup

* Add payment

* Fix stripe w/o connect

* cols

* Add tests
 2018-03-26 20:52:24 +02:00
Raphael Michel 9ca61f9ef5 Remove left-over print statements from debugging 2018-03-26 10:21:14 +02:00
Raphael Michel 3a7e0da80b Backend UX: Restructure payment settings 2018-03-24 18:18:28 +01:00
Raphael Michel 072f2a0ee9 Pin sessions to the user agent in use 2018-02-19 13:02:55 +01:00
Raphael Michel 0b12b7aa89 Refs #678 -- Allow deletion of events that do not have any orders 2018-01-29 12:25:11 +01:00
Raphael Michel 3a713541a2 User management UI for system administrators 2018-01-29 12:25:11 +01:00
Raphael MichelandGitHub e12caf186c Use Select2 for subevent and other long selections (#763) 
* Use Select2 for subevent and other long selections

* Minor correction
 2018-01-26 16:47:33 +01:00
Raphael Michel 1ee6e31538 Fix #190 and #472 -- Change of questions within pretix control 2018-01-26 12:43:47 +01:00
Raphael MichelandGitHub f8cc332ed7 Use "cancel" method instead of "refund" for free orders (#743) 
* Use "cancel" method instead of "refund" for free orders

* Adjust API
 2018-01-15 21:46:16 +01:00
Aiman ParvaizandRaphael Michel dd42037f21 Fix #634 -- Do not allow deleting the last date of an event series (#675) 
* Checking for the last date in the event series before deleting a date. Last date in a event series should never be delted.

* Adding check to ensure that last date in a event series is not deleted. Editing unit test around deleting subevent to assert on alert-danger

* Increasing the scope of test_delete. We are now creating 2 subevents and testing deleting one and ensuring that the last one is not deleted

* Fixing alert text. Removing a redundant if condition for checking subevent count

* Adding assert for second event to ensure its not deleted

* Minor fixes and rebase
 2018-01-14 13:54:22 +01:00