Commit Graph

52 Commits

Author SHA1 Message Date
Samuel Georges fc490b18e9 Add actionUrl() helper to backend controller
Used for generating URLs to the current controller
2015-07-23 19:44:54 +10:00
Samuel Georges 606892143b Added new security config option cms.enableCsrfProtection 2015-07-04 09:31:28 +10:00
Samuel Georges f9c921a797 Adds getAjaxHandler() API to controllers
Fixes bug where update process fails midway
2015-06-30 08:56:53 +10:00
Samuel Georges d9dfa21372 Adds CSRF protection to the backend - Refs #105 2015-06-20 21:17:58 +10:00
Samuel Georges cd1d62d8d7 AJAX requests can only use the POST method 2015-06-20 20:18:58 +10:00
Samuel Georges 9ed73e0cba Updates for new symbolizePath API, requires latest rain lib code
Backend layouts can now be provided by plugins
2015-05-30 15:54:47 +10:00
alekseybobkov c1740c479c Media Manager: implemented insert link, insert image, and crop and insert features. Minor fixes in October core and third-party JS plugins. 2015-04-11 18:55:02 -07:00
Samuel Georges 77d3ab8b67 Finish basic theme utilities: properties, import/export, duplicate, delete 2015-03-16 19:00:39 +11:00
Samuel Georges 9b8e1ce3c1 Improve theme list to allow editing properties 2015-03-14 18:09:54 +11:00
Samuel Georges a3f3084924 Implement AjaxException 2015-03-03 18:41:09 +11:00
Samuel Georges 7b52e07b65 Overhaul exceptions, rename triggerapi display -> show 2015-02-16 21:16:43 +11:00
Samuel Georges 0a6e14f4d2 Popup control now supports several sizes via `data-size` attribute: giant, huge, large, small, tiny.
Fixes various bugs in RC version
2015-02-11 14:36:00 +11:00
Samuel Georges b1b700368f Radical reorg of some classes 2015-01-28 11:49:54 +11:00
Samuel Georges e7b0c3ae2c Typo 2015-01-18 15:30:09 +11:00
Samuel Georges 47cd204686 Add event for backend, before running a controller 2015-01-18 15:23:19 +11:00
Samuel Georges 5bbb248ffa Minor 2015-01-18 14:49:09 +11:00
Samuel Georges eb8f4ec1a8 Removed generic permission "Manage settings", these should be more granular to the tool
Fixes #831 - Fixes dashboard redirect, add "Manage mail settings" permission
Fixes bug in Settings permissions, they now work!
2015-01-18 13:16:18 +11:00
Samuel Georges d3000ca51a Unify the handling of detailed exception messages 2014-12-16 12:21:55 +11:00
Sam Georges 38170d3101 Use popup loading indicator on relationcontroller behavior 2014-11-07 19:38:05 +11:00
Sam Georges c32ba4cbad Minor code clean 2014-11-04 17:41:48 +11:00
Sam Georges c83797231d Subsequent expressions are on a new line (see developer guide > PSR exceptions) 2014-11-01 12:00:45 +11:00
Sam Georges 23f6d75416 Peer review of #679 2014-10-19 10:58:18 +11:00
Stefan Talen 347dff7e75 Merge branch 'develop' of https://github.com/octobercms/october into feature/PSR-2
Conflicts:
	modules/backend/behaviors/RelationController.php
	modules/backend/classes/WidgetManager.php
	modules/cms/classes/CmsCompoundObject.php
	modules/cms/twig/Extension.php
	modules/cms/twig/PlaceholderNode.php
	modules/cms/widgets/TemplateList.php
2014-10-18 11:07:17 +02:00
Stefan Talen 06890d711a Merge branch 'develop' of https://github.com/octobercms/october into feature/PSR-2
Conflicts:
	modules/backend/behaviors/UserPreferencesModel.php
	modules/cms/classes/Controller.php
	modules/system/classes/CombineAssets.php
2014-10-16 18:44:18 +02:00
Sam Georges 9f5646d273 BackendSettings -> BrandSettings
pageTitle is now translated at the end of the line
Fixed unit tests so they pass
SettingsModels are now cached
2014-10-15 19:53:44 +11:00
Stefan Talen dcb292b246 Fixing incorrect brackets 2014-10-12 13:43:50 +02:00
Stefan Talen 7dc24cfff1 Updating backend/classes 2014-10-10 23:12:50 +02:00
Sam Georges bf47eb94ed Str::getRealClass -> class_basename 2014-09-29 13:12:34 +10:00
Sam Georges fbf5cbbb67 Moved `ViewMaker` trait to live under system, it can be useful for Models too. 2014-09-29 12:19:19 +10:00
Sam Georges 65573da89b Add the ability to override backend assets and layouts using a Skin 2014-09-20 11:25:57 +10:00
Sam Georges a0bfbfc0d6 CMS AJAX handlers now have a way to invoke the page cycle if desired 2014-08-23 17:23:29 +10:00
Sam Georges 37291a0c63 Throw ApplicationException when AJAX handler not found 2014-08-13 07:52:47 +10:00
Sam Georges 8a86927944 Make ApplicationException more friendly 2014-08-03 10:34:33 +10:00
Sam Georges 2b784392e8 Show a more detailed error on Backend AJAX exceptions 2014-07-19 13:35:16 +10:00
Sam Georges 242a3a5cde Buttons inside a popup support new `data-popup-load-indicator` attribute.
Other minor improvements
2014-07-17 16:42:49 +10:00
Sam Georges 86daf9f308 Add event emitter to backend controllers
Minor tidy up
2014-07-15 08:14:59 +10:00
Sam Georges 223f3025f0 Adds a hint system to the backend 2014-07-11 18:50:11 +10:00
Sam Georges 7ecf361eb3 Fixes validation of requested partial names VS. partial names on file system 2014-07-06 12:42:08 +10:00
alekseybobkov f181276d88 Do not try to load user preferences if there is no user (login page, etc). 2014-07-03 20:14:02 +11:00
Sam Georges b09b6d6863 Improved naming onReload -> onRefresh
Improved Record finder
2014-07-03 18:37:51 +10:00
Sam Georges ddb6337efe EditorSettings -> EditorPreferences (System has settings, User has preferences, App has configuration)
Create a My Settings page, now linked when clicking a User
Create backend preferences form for setting locale
Dropdown options now support an image or icon in their options
2014-07-01 17:17:53 +10:00
alekseybobkov aee0777032 Display a correct CMS object name in the page title. Fixes #28. Fixes #354. 2014-06-26 15:29:38 +11:00
Sam Georges b1d8756dfb Add a more meaningful message to MassAssignmentExceptions 2014-06-20 19:30:50 +10:00
Sam Georges 28701f9a3b Backend and frontend controllers now return a Response object and support setting the status code 2014-06-17 21:00:26 +10:00
Sam Georges 91ecb55ca3 Tidy up #314 2014-06-17 19:13:25 +10:00
Louis Matthijssen bbd2915637 Improve the access denied (403) page
This is an improved version of the current access denied (403) page based on the built-in not found (404) page.

Shows a link to the CMS backend if the user is logged in and doesn't have permissions for the backend page it's trying to access, but does have permissions for the CMS backend.

Please note that the following languages are machine translated: ja, pt-br, ru and sv.
2014-06-16 22:58:37 +02:00
Sam Georges 23adc64db1 Undo bad change 2014-06-16 21:13:46 +10:00
Louis Matthijssen 692b7d8cf8 Add 'manage partials' and fix my settings
Fixes #279.
2014-06-16 13:04:50 +02:00
Sam Georges 1728295f3f Fixes an issue where success is still called when AJAX validation fails 2014-06-02 18:16:39 +10:00
Pascal Borreli 459c8e0cfa Fixed typos 2014-05-17 18:08:01 +02:00