##// END OF EJS Templates
auth: Fix password_changed function, fixes #4043....
auth: Fix password_changed function, fixes #4043. Never repot a changed password for default or anonymous users. If anonymous access is disabled we don't get the default user here so we also have to check if it is the anonymous user. In both cases (default user and anonymous user) we can skip the password change check and return False.

File last commit:

r169:c3fe2001 v4.1.0 stable
r482:930b0a4d default
Show More
release-notes-4.1.0.rst
56 lines | 1.8 KiB | text/x-rst | RstLexer

|RCE| 4.1.0 |RNS|

Release Date

  • 2016-06-12

General

  • Migrated more views to Pyramid. Those now include login, social auth plugins, full text search.
  • Started implementing Pyramid Events system in exchange to rcextensions callbacks.
  • JS routes assets are now generated in development mode automatically.
  • ini: Add fallback authentication plugin setting. In case only one authentication backend is enabled users can now enable fallback auth if they cannot log-in due to external servers being down.
  • Bumped Mercurial to 3.8.3 version.
  • Bumped RhodeCode Tools to 0.8.3 version.

New Features

  • Search: add syntax highlighting, line numbers and line context to file content search results.
  • Enabled new Elastic Search based engine.
  • Go To switcher now searches commit hashes as well.
  • RhodeCode Auth-Token based authentication is now in CE edition.
  • User groups: added autocomplete widget to be able to select members of other group as part of current group.

Security

  • Added new action loggers for actions like adding/revoking permissions.
  • permissions: show origin of permissions in permissions summary. Allows users to see where and how permissions are inherited

Performance

Fixes

  • api: gracefully handle errors on repos that are damaged or missing from filesystem.
  • logging: log the original error when a merge failure occurs
  • #3965 Cannot change the owner of a user's group by using the API
  • database is now initialized inside pyramid context
  • fixed wrong check on LDAP plugin about missing ldap server
  • Bring back multi-threaded workers to gunicorn for backward compatibility with previous RhodeCode versions
  • Commit dates are now properly handled as UTC. This fixes some issues with displaying age of commits