- 22 Mar, 2019 1 commit
-
-
When trying to hit a non homepage page where login is required behatnotneeded Change-Id: Ia52dff12c16dd58304bbe9251723311e3b18325e Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 22 Feb, 2019 2 commits
-
-
Lisa Seeto authored
Created new lowercase string arrays for singular and plural time units. Altered the expirystring to reflect changes. behatnotneeded Change-Id: I1555325f24843a628305cd6afe9cc9b45f8d5d94 Signed-off-by:
Lisa Seeto <lisaseeto@catalyst.net.nz>
-
Robert Lyon authored
behatnotneeded Change-Id: I1e4b44f7fa39779eaf91c992e47d8e075b6cbe33 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 03 Nov, 2018 1 commit
-
-
Add a pre-login hook to check if user is already logged in, giving each auth plugin the chance to authenticate or redirect the user as needed. behatnotneeded Change-Id: I690fd174a02e9ffd26b8e3c8f3efad041b54d3da
-
- 29 Oct, 2018 1 commit
-
-
Robert Lyon authored
On the Admin -> Pending registrations page Also added the expiry date to show admin when they will disappear if not actioned Also updated the text to make it a bit clearer about what is happening when behatnotneeded Change-Id: Icb33def34fa79c41438d58a50e9e139da6a950cb Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 24 Oct, 2018 1 commit
-
-
Robert Lyon authored
W3 speicifications have changed and Mahara code didn't pass the validator. Issues have been corrected. behatnotneeded Change-Id: Ic22cc7cd6df0bddc995ff7f61502a2aa7455810c Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 18 Oct, 2018 1 commit
-
-
Cecilia Vela Gurovic authored
reserved keyword found needing to be fixed: admin was set to reserved in mysql 8.0.2 and then changed back to unreserved in 8.0.12 we need this patch for the version in between them behatnotneeded Change-Id: Ife693b3d490ca5fd1112d0a55ff1ae74a9579aa5
-
- 27 Sep, 2018 1 commit
-
-
behatnotneeded Change-Id: Ie83774a85379f54b6de83cf68fffdfff21ec618f
-
- 12 Sep, 2018 1 commit
-
-
Robert Lyon authored
So a site can specify where a user ends up on normal login Change-Id: Iab57bda8505fe7556e0692481502eeb409e93335 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 31 Aug, 2018 1 commit
-
-
Robert Lyon authored
behatnotneeded Change-Id: I4b7b4d95bd17ff2fea81e3b750f9978471ec5d7a Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 14 Aug, 2018 1 commit
-
-
replaced each() with foreach in core code. replaced create_function() with anonymous function in core code. Also removed some functions that were not used anymore behatnotneeded Change-Id: I300396a1ec04c75d7882b7ec5c9de76c3763e70d
-
- 07 Aug, 2018 1 commit
-
-
Event Breaking change: .load(), .unload(), and .error() removed Breaking change: .on("ready", fn) removed Breaking change: event.pageX and event.pageY normalization removed Breaking change: jQuery.event.props and jQuery.event.fixHooks removed Breaking change: Delegated events with bad selectors throw immediately Deprecated: .bind() and .delegate() no calls to .bind() for events in core. Only calls to bind() refer to the js bind of arguments to functions. no calls to unbind() for event in core. Only calls to unbind refer to the unbind method defined in formChangeManager not related to the jQuery method. Warnings fix JQMIGRATE: jQuery.fn.click() event shorthand is deprecated - also applies to the other event shorthands, including: blur, focus, focusin, focusout, resize, scroll, dblclick, mousedown, mouseup, mousemove, mouseover, mouseout, mouseenter, mouseleave, change, select, submit, keydown, keypress, keyup, and contextmenu. JQMIGRATE: jQuery.fn.hover() is deprecated JQMIGRATE: jQuery(window).on('load'...) called after load event occurred (for FileBrowser we can see this error when editing a block in a page) behatnotneeded Change-Id: I1a50050f882b864ad63d273de160e0b441a77705
-
- 05 Jun, 2018 1 commit
-
-
Robert Lyon authored
The fix in Bug 1774309 fails to work correctly when the site is in a subdirectory of the apache root. To test: 1) Adjust your site's apache file and set the DocumentRoot to be parent of htdocs 2) Change the 'wwwroot' db value for site to include the 'htdocs/' bit 3) Restart the apache server 4) Go to site, adding 'htdocs/' to url 5) Try logging in before patch: end up not found page with url containing two 'htdocs/' after patch: end up at correct place behatnotneeded Change-Id: Ic5e1de2c5edaf96bbdd9b2403f0f65e45a4b80c0 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 31 May, 2018 1 commit
-
-
Robert Lyon authored
If trying to access a page requiring login the system remembers the path (QUERY_STRING) you were trying to access when login is successful But if you login from the homepage there can be no QUERY_STRING set Noticed when doing behat tests behatnotneeded Change-Id: I38cf1f6df7432d70ced5fe5df84bd56b47f1f163 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 29 May, 2018 1 commit
-
-
Cecilia Vela Gurovic authored
Change-Id: Ieb4ebab6ac57ff0ef4f4f89b409884e9d6bc3db7
-
- 21 May, 2018 1 commit
-
-
Robert Lyon authored
By using redirect to avoid exposing sensitive data after login / password reset behatnotneeded Change-Id: I4d64c7c51bb1af81dac594de0563be243a990ed6 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 02 May, 2018 1 commit
-
-
Robert Lyon authored
If there is only one user with email then it will link it up automatically behatnotneeded Change-Id: I23cffe7730b8f4a9435e68d00cc227d622ec8269 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 04 Apr, 2018 1 commit
-
-
Robert Lyon authored
Rather than update db directly - we need to update the USER object behatnotneeded Change-Id: I31f8c6759dd621439c90ddc0f0dc8a344359d5d9 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 03 Apr, 2018 1 commit
-
-
behatnotneeded Change-Id: Id2c5dce74097413b137174ac7c08555c59f37572
-
- 28 Mar, 2018 1 commit
-
-
Robert Lyon authored
behatnotneeded Change-Id: I0da3f8a12d62ff5142974e0f068ddf591c75979d Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 27 Mar, 2018 1 commit
-
-
Robert Lyon authored
We should only show the privacy/T&C confirm switches when either strict privacy or registration agree to T&C is turned on Otherwise show legal info without switches behatnotneeded Change-Id: I0184bbebc35e1f29020bcb46c0abcdd3cf3cb3be Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 08 Mar, 2018 1 commit
-
-
Change-Id: I7b04f12de8d896c56c81bfeb5d53a7bd91003b0e
-
- 05 Mar, 2018 1 commit
-
-
Improve the password policy enforcement and configuration in Mahara. Have a pre-defined password policy of a minimum of 8 characters with type "alphanumeric mixed case + symbols". Also allow site administrators to set the desired password policy in Site Options > Security Settings. In all locations where password is set, the password input should also include a password strength indicator. Change-Id: I020af58a6cf1635fe295f5434783ce5b6f6daacb
-
- 14 Feb, 2018 2 commits
-
-
Had to change the definition of the following strings: "siteprivacystatement" to "siteprivacy" "sitetermsstatement" to "sitetermsandconditions" "institutiontermsstatement" to "institutiontermsandconditions" behatnotneeded Change-Id: Ib2fd10b72ab4d6d80299a120e9cfbd11bd9fc8fe
-
behatnotneeded Change-Id: I3bf21e40c957fd97b7c1b0d836ed340bebeb7616
-
- 12 Feb, 2018 4 commits
-
-
Add a textare in the 'are you sure' modal where the user can write the reason why he refuses to consent to a privacy statement. This reason will be sent in a message to the institution or site admin. behatnotneeded Change-Id: I6abe4c8c7c517b1319139497bedb40525d095fcb
-
When a user doesn't consent to a privacy statement, a message will be sent to the institution/site admin. If the user is part of an institution,the message will be sent just to the inst admin. Else the message will be sent to the site admin. behatnotneeded Change-Id: I7b3b87a59a537a805d851d29031df9cff941863e
-
1. Add the Yes/No switch to the users privacy page that will allow the user to withdraw their consent if they change their mind. 2. Display the date when a user consented to a privacy statement. behatnotneeded Change-Id: If9f85125287a7384e27c1b45aefa98ad37e97776
-
behatnotneeded Change-Id: I9d7685dc6c3b0871fa2471ce27c0a4aa67af0b34
-
- 09 Feb, 2018 1 commit
-
-
Robert Lyon authored
Rather the more confusing x days in the future behatnotneeded Change-Id: I1413b75ae279bbee537cd7aff3c1ee37b5a73598 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 08 Feb, 2018 2 commits
-
-
Robert Lyon authored
@TODO - add a textarea field for reason to not accept - add test to suspend user when it doesn't accept Change-Id: I7479e8ac1863f7712d45d92e5b60deced2847391 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
Maria Sorica authored
If a privacy switch has the value 'No', a confirmation form will be displayed to make sure this is really the users decision. If yes, the users account is suspended. behatnotneeded Change-Id: Ifa7c175569cbad780a449c8431d4d9f981839c21
-
- 05 Feb, 2018 1 commit
-
-
Maria Sorica authored
Upon login, if the user has not yet agreed to the most recent Privacy statement versions, he will be redirected to this page. On install admin user accepts default privacy behatnotneeded Change-Id: I6afc3d4d4db0676782a8b1501a962862108eab6b
-
- 15 Jan, 2018 1 commit
-
-
We achieve this by having a new pieform rule called 'requiredby' where we can reference another field and when a certain value is set in that field it makes this field required. requiredby rule needs an array containing: - the 'reference', a string of the name of the related field within the same form - the 'required', an array containing the values of 'reference' element as keys and true/1 for value if this element is required. -- If the reference field returns true/false then required array would have either 'true' => 1 or 'false' => 1 depending on what setting is needed behatnotneeded Change-Id: I9bc5d15b4035d4a11b81b9355a32044c66ee2199
-
- 26 Nov, 2017 1 commit
-
-
Robert Lyon authored
The USER object will have id = 0 when a user is logged out It should never end up in the usr_session table. This patch stops that from happening and also ignores usr = 0 insession table with setting up auth as well. behatnotneeded Change-Id: I0ba7afe0d21ae822daf8895af943f41048ba82b7 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 19 Nov, 2017 1 commit
-
-
And avoid direct $_GET and $_POST usage where possible and instead use param_exists() and the correct param_*() function to fetch the expected value behatnotneeded Change-Id: If2a917360ebf1d198a494907517eb06bb823743c
-
- 09 Nov, 2017 1 commit
-
-
Robert Lyon authored
behatnotneeded Change-Id: I6c5c485b790d6da64ff72c82fada1e83fc6fcb8f Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 27 Oct, 2017 1 commit
-
-
Cecilia Vela Gurovic authored
1. when a user logs in it clears any obsolete usr_session cookies for the user 2. recording the user-agent of the session and if it changes to prompt the user to login again 3. when self adding / editing email address(es) send 2 emails - one to the new email address asking user to confirm address - and one to the primary email address to alert user that a new email is being added to their account and if this is bad how to contact their admin about the problem. behatnotneeded Change-Id: Ia44b66cf831abd553b72aa8b1d58d2a2634863b8
-
- 24 Oct, 2017 1 commit
-
-
Robert Lyon authored
to avoid having problems when the user emails another user Change-Id: If694e969ea8a9d77badfffa095dc5fac3b6da417 Signed-off-by:
Robert Lyon <robertl@catalyst.net.nz>
-
- 21 Sep, 2017 1 commit
-
-
behatnotneeded Change-Id: If1e267fb551faff3be2537b14a6b8917b263dddd
-