gavin
|
2b27652bd4
|
Merge branch 'develop' into permlevel-apis
|
2023-01-10 17:45:46 +05:30 |
|
Gavin D'souza
|
d2ad86d2fe
|
test: Add tests for permlevel handing in get_list
|
2023-01-10 17:44:06 +05:30 |
|
Gavin D'souza
|
3ee510439b
|
fix(db_query): Allow standalone functions, rename get_permitted_fields
|
2023-01-10 17:43:14 +05:30 |
|
Raffael Meyer
|
ed30a6d59f
|
refactor(minor): use DocStatus (#19545)
|
2023-01-10 17:38:11 +05:30 |
|
Ankush Menat
|
894f0affcc
|
fix(DX): Print alter query if it fails during migration (#19552)
|
2023-01-10 16:55:29 +05:30 |
|
Suraj Shetty
|
0d62cbb470
|
Update SECURITY.md
|
2023-01-10 16:49:44 +05:30 |
|
Ankush Menat
|
49fd3a5372
|
ci: update codecov.yml flags
|
2023-01-10 13:19:12 +05:30 |
|
Ankush Menat
|
41f8fb1a68
|
fix: Log settings - Handle validation failures (#19549)
There's only one sane way to get past validations - remove the rows, so
just do it instead of asking users to do it.
[skip ci]
|
2023-01-10 12:30:01 +05:30 |
|
Ankush Menat
|
1eaca4e1d5
|
fix: RSS feed escaping (#19546)
if title contains reserved chars then malformed XML is generated.
Try title with ampersand in it.
[skip ci]
|
2023-01-10 11:45:31 +05:30 |
|
Ankush Menat
|
278a56417b
|
fix: logging type annotations
closes https://github.com/frappe/frappe/issues/19521
|
2023-01-10 00:02:44 +05:30 |
|
Shariq Ansari
|
2827167975
|
Merge pull request #19539 from shariquerik/hide-unhide-workspace
|
2023-01-09 21:01:46 +05:30 |
|
Shariq Ansari
|
f19e7281ae
|
test: added UI test for hide/unhide workspace
|
2023-01-09 20:41:18 +05:30 |
|
Shariq Ansari
|
a6b56c36a9
|
fix: render drop-icon if hide/unhide parent workspace
|
2023-01-09 19:30:13 +05:30 |
|
Daizy Modi
|
d6c6df74db
|
fix: use doc.has_permission instead of frappe.has_permission (#19541)
|
2023-01-09 19:03:45 +05:30 |
|
Gavin D'souza
|
6aea25a6c1
|
test: Update tests to handle missing attributes based on permlevel
|
2023-01-09 18:48:48 +05:30 |
|
Shariq Ansari
|
9ca33d2946
|
chore: type check
|
2023-01-09 18:46:35 +05:30 |
|
Gavin D'souza
|
ae81cd2dd3
|
fix(doc): Maintain virtual df data in as_valid_dict
|
2023-01-09 18:44:42 +05:30 |
|
Shariq Ansari
|
b4da91cdfd
|
Merge branch 'develop' into hide-unhide-workspace
|
2023-01-09 18:32:35 +05:30 |
|
Ritwik Puri
|
fabe3906aa
|
chore: remove deprecated check_admin_or_system_manager function (#19540)
|
2023-01-09 18:32:09 +05:30 |
|
Shariq Ansari
|
29ff3be1cc
|
style: hide drop-icon if child workspaces are hidden
|
2023-01-09 18:31:04 +05:30 |
|
Gavin D'souza
|
bb9763def7
|
fix(db_query): Parse SQL function calls to check if field is accessible
|
2023-01-09 18:19:03 +05:30 |
|
Shariq Ansari
|
97a57f7105
|
feat: hide/unhide workspace from sidebar
|
2023-01-09 17:51:25 +05:30 |
|
Ankush Menat
|
f5771baf66
|
ci: use GITHUB_TOKEN for roulette api calls (#19537)
This is safe cuz we set read only permission on this token in workflows.
NOTE: Changing permission type is dangerous here!
|
2023-01-09 17:09:59 +05:30 |
|
Gavin D'souza
|
058c49f439
|
fix: Pass parenttype in meta calls, handle count(*) type queries
|
2023-01-09 17:09:36 +05:30 |
|
Ankush Menat
|
3e715985c6
|
fix: ignore unhandled emails while deleting email account (#19534)
[skip ci]
|
2023-01-09 16:53:23 +05:30 |
|
Gavin D'souza
|
2a6f9b1b9a
|
fix(db_query): Load doctype meta on demand not on init
|
2023-01-09 16:22:01 +05:30 |
|
Gavin D'souza
|
1f50370599
|
fix(db_query): Apply permlevel checks on child/joined table queries
|
2023-01-09 16:12:22 +05:30 |
|
Gavin D'souza
|
15e51307b1
|
fix(db_query): Maintain order of dict[/select] keys
* Reduce internals' mutating calls
* maintain order of fields as previous function
* Use performant f-strings over concat + formatting
|
2023-01-09 15:47:21 +05:30 |
|
Gavin D'souza
|
1cd7620a3c
|
fix: Fetch fields according to meta maintain order
|
2023-01-09 15:47:21 +05:30 |
|
Gavin D'souza
|
48aa7e8a93
|
perf(db_query): Avoid re-fetching doctype meta
Store doctype meta in DatabaseQuery instance under `doctype_meta`
bypassing multiple get_meta calls and Redis/DB IO & serialization overheads.
|
2023-01-09 15:47:21 +05:30 |
|
Gavin D'souza
|
d71522091e
|
fix: Apply permlevel restrictions to DatabaseQuery
Allow reading only accessible fields for given user session if
ignore_permissions (get_all) is unset.
|
2023-01-09 15:47:21 +05:30 |
|
Gavin D'souza
|
ee074ec3c0
|
perf: DatabaseQuery.prepare_args
* Re-use stripped str variable where possible
* Remove use of any + [], startswith to get rid of unnecessary evaluations
|
2023-01-09 15:47:21 +05:30 |
|
Gavin D'souza
|
c28e4590e8
|
fix(rest): Delete doc attr if insufficient field permissions
|
2023-01-09 15:47:21 +05:30 |
|
Gavin D'souza
|
84ccf3d128
|
fix: Apply field permlevel for doc GET via REST
|
2023-01-09 15:47:21 +05:30 |
|
Ankush Menat
|
92a705f8fd
|
ci: retry if rate limited in roulette (#19523)
[skip ci]
|
2023-01-09 13:11:22 +05:30 |
|
Ankush Menat
|
ac5b86cab1
|
ci: use node18 for releases (#19525)
Node <18 isn't supported anymore
> [semantic-release]: node version >=18 is required. Found v14.21.1.
> See https://github.com/semantic-release/semantic-release/blob/master/docs/support/node-version.md for more details and solutions.
[skip ci]
|
2023-01-09 13:10:26 +05:30 |
|
jiangying
|
f18135b52b
|
chore: simplify frappe/permissions.py raise_exception condition assignment (#19518)
* simplify frappe/permissions.py raise_exception
|
2023-01-09 13:03:59 +05:30 |
|
Ankush Menat
|
82d18f0bf0
|
Merge pull request #19519 from AHasanin/fix-userprofile-with-postgres
fix(user profile): fix user profile queries to support postgresql
|
2023-01-09 12:23:07 +05:30 |
|
Ankush Menat
|
075a2d778e
|
feat: UnixTimestamp QB function
|
2023-01-09 12:05:52 +05:30 |
|
Ahmed Hasanin
|
45c80669bc
|
Merge branch 'develop' into fix-userprofile-with-postgres
|
2023-01-08 19:52:46 +02:00 |
|
AHasanin
|
78816428e4
|
fix(user_profile): remove unnecessary f string
|
2023-01-08 19:51:05 +02:00 |
|
jiangying
|
8273c9f244
|
chore: fix comment typo in frappe/desk/reportview.py (#19517)
|
2023-01-08 20:04:14 +05:30 |
|
AHasanin
|
9d14c68ca8
|
fix(user profile): fix user profile qeuries to support postgres
|
2023-01-08 16:15:20 +02:00 |
|
Ritwik Puri
|
e315c4f4b6
|
Merge pull request #19516 from dj12djdjs/fix-customize-form
fix: use doc_type within frappe.model.with_doctype
|
2023-01-08 10:15:27 +05:30 |
|
Devin Slauenwhite
|
fa06093fc4
|
fix: use doc_type within frappe.model.with_doctype
|
2023-01-07 17:35:50 -05:00 |
|
Shariq Ansari
|
32ea734e9c
|
Merge pull request #19510 from shariquerik/delete-standard-workspace-fix
|
2023-01-07 19:21:25 +05:30 |
|
Shariq Ansari
|
6f1e3e1a91
|
fix: show settings button only to workspace manager
|
2023-01-07 19:01:41 +05:30 |
|
Shariq Ansari
|
056d8e0368
|
Merge branch 'develop' into delete-standard-workspace-fix
|
2023-01-07 17:57:22 +05:30 |
|
Shariq Ansari
|
0a8591ffa4
|
Merge pull request #19496 from barredterra/workspace-perms
|
2023-01-07 17:30:24 +05:30 |
|
Shariq Ansari
|
580c9d6571
|
fix: do not allow to change module field if developer_mode is not set
|
2023-01-07 17:19:38 +05:30 |
|