Commit graph

46163 commits

Author SHA1 Message Date
Shariq Ansari
1b1c11ad5e fix: do not allow deleting other's private workspaces 2023-10-17 19:13:56 +05:30
Ankush Menat
440612f3b9
fix: Check perms before sharing linked docs (#22783) 2023-10-17 18:53:09 +05:30
Ankush Menat
691eae8e84
fix: check read before assigning/removing (#22779) 2023-10-17 18:51:44 +05:30
Shariq Ansari
ea023888a3 fix: some field properties shown in multiple fields on select of same type of fields 2023-10-17 17:51:45 +05:30
ranjit-git
73b58a42b0
fix: filename xss (#22778) 2023-10-17 17:43:57 +05:30
Ankush Menat
adac59363f
Merge pull request #22774 from ankush/rate_limit_ip
feat: rate limit logins based on IP too
2023-10-17 17:40:29 +05:30
Ankush Menat
7f35d0f8e6 style: format 2023-10-17 17:36:19 +05:30
Maharshi Patel
fd1fe44850 fix: cypress and add check for __islocal
changed check for __islocal as well in savedocs

As new route ends with random hash instead of numbers,
updated cypress test to just check start of data-route instead of entire path
2023-10-17 17:19:53 +05:30
Ankush Menat
f4f6d97d06 refactor: make login tracker support arbitrary keys 2023-10-17 17:18:11 +05:30
Ankush Menat
768d4ba4b0 feat: rate limit logins based on IP too
Co-Authored-By: Aditya Hase <aditya@adityahase.com>
2023-10-17 17:18:08 +05:30
Ankush Menat
27d50bb0d1 fix!: Enable login tracker by default 2023-10-17 17:18:08 +05:30
Shariq Ansari
5a06a93254 fix: enclose FetchFormControl in a div 2023-10-17 16:50:14 +05:30
Shariq Ansari
f707fdf28a
Merge pull request #22768 from shariquerik/convert_old_to_new_number_format 2023-10-17 16:40:28 +05:30
Suraj Shetty
213c545398
Merge pull request #22570 from FHenry/dev_fr_translation_cleanup 2023-10-17 16:24:10 +05:30
Suraj Shetty
330fde3dcf
Merge pull request #22637 from bosue/todo_quickentry_with_duedate 2023-10-17 16:23:36 +05:30
Shariq Ansari
798e3781bf fix: fieldname is editable in customize form it should be read_only 2023-10-17 16:06:25 +05:30
Shariq Ansari
b6786dfeac fix: precision select option show [object object] as first value 2023-10-17 16:05:38 +05:30
Suraj Shetty
4f2f47ad5c
Merge pull request #22771 from zerodha/theme 2023-10-17 16:05:12 +05:30
shridhar
b864706c55 feat: Auto refresh when user updates theme 2023-10-17 14:55:14 +05:30
Shariq Ansari
51185af12f fix: number card shorten number is not formatted correctly if number format is not default 2023-10-17 14:54:35 +05:30
Ankush Menat
1942a99842
Merge pull request #22764 from zerodha/css_fixes
fix: Login with Email Link buttons css
2023-10-17 13:47:53 +05:30
shridhar
d845c54994 fix: login with email buttons css 2023-10-17 13:24:21 +05:30
Gursheen Anand
c0eab52877 chore: fix translation 2023-10-17 12:23:16 +05:30
Ankush Menat
5de126aea9
Merge pull request #22757 from frappe/fix-ci-boilerplate
fix: add mariadb-client install step in workflow boilerplate
2023-10-17 11:57:05 +05:30
Ankush Menat
33cd599356
Merge pull request #22760 from ankush/filters
fix(UX): Preserve filters between list and report views
2023-10-17 11:39:06 +05:30
Ankush Menat
563639235e
Merge pull request #22300 from ankush/api_v2
feat!: API versioning and API v2 (beta)
2023-10-17 11:34:26 +05:30
Ankush Menat
7d4040405a fix(UX): Preserve filters between list and report views 2023-10-17 11:02:09 +05:30
Ankush Menat
a46389a7e4 test: Split API v2 tests
Duplication here seems better than weird and hard to understand
parameterized version.
2023-10-17 10:27:37 +05:30
Ankush Menat
76b4d209c7 feat: frappe.call can accept api_version 2023-10-17 10:14:58 +05:30
Corentin Flr
2b542d87e1
fix: Fix scopes for Google Calendar (#22614)
https://developers.google.com/identity/protocols/oauth2/scopes
2023-10-17 08:07:38 +05:30
Hussain Nagaria
f1ba76f5f7 fix: add mariadb-client install step in workflow boilerplate 2023-10-16 19:40:09 +05:30
gavin
c706040c31
ci: Add Coveragerc (#22530) 2023-10-16 18:24:16 +05:30
Ankush Menat
4dfb44d0a2 fix: assume v1 if path is not set
Old `cmd` calls will not work otherwise.
2023-10-16 18:13:50 +05:30
Ankush Menat
e2714c3e1c feat: v2 error and debug log structure 2023-10-16 18:13:50 +05:30
Ankush Menat
6fd97bcbcf fix: Add old file upload for v2 2023-10-16 18:13:50 +05:30
Ankush Menat
018ed845bd refactor: defer unnecessary json-dumping of messages
Also avoid accessing locals where interface is present like for popping last message.
2023-10-16 18:13:50 +05:30
Ankush Menat
411819ef81 feat: v2 for message response strucutre 2023-10-16 18:13:50 +05:30
Ankush Menat
3cc2ca8fc7 test: old API messages 2023-10-16 18:13:50 +05:30
Ankush Menat
dfcb69ab21 refactor: use reportview get_count implementation
Count reported should be according to permissions
2023-10-16 18:13:50 +05:30
Ankush Menat
47538f7601 feat: doctype collection level APIs - meta, count 2023-10-16 18:13:50 +05:30
Ankush Menat
cfd3fb9341 refactor: PUT == PATCH
Correct conventions for partial updates
2023-10-16 18:13:50 +05:30
Ankush Menat
c8cd658d26 fix: add login and logout methods 2023-10-16 18:13:50 +05:30
Ankush Menat
67a5957056 fix: check for write permission if POST method 2023-10-16 18:13:50 +05:30
Ankush Menat
824229ce0a refactor: no need to cast bools manually 2023-10-16 18:13:50 +05:30
Ankush Menat
43028f51d9 refactor: simplify v2 implementations 2023-10-16 18:13:50 +05:30
Ankush Menat
7996f76ebb fix: Better delete doc for child tables 2023-10-16 18:13:50 +05:30
Ankush Menat
232f080044 feat: run_doc_method v2 2023-10-16 18:13:50 +05:30
Ankush Menat
d117e2c08b fix!: Last overriden method should be considered 2023-10-16 18:13:33 +05:30
Ankush Menat
bfb463e814 refactor!: merge handle.py
This has several breaking changes for v2:
1. No support for following methods which were implicitly present in
   default namespace.
    - run_doc_method
    - ping
    - web_logout
    - logout
    - uploadfile
    - upload_file
    - download_file
2023-10-16 18:12:53 +05:30
Ankush Menat
e63f0c895d refactor: resource => document
This lets us create three types of APIs:

- Document APIs that operate on documents
- DocType APIs that operate on collections - list, count, search
- Method APIs that are RPC calls
2023-10-16 18:12:53 +05:30