u/pc/rhodecode-enterprise-ce-fork-pc Files · rhodecode/templates/admin/users/user_edit_audit.mako

security: make sure the admin of repo can only delete comments which are from the same repo....

security: make sure the admin of repo can only delete comments which are from the same repo. - fixes IDOR issue - protects against other people comment deletion by repo admins.

marcink - - Load All Authors

File last commit:

r1696:089e4a01 default


                r1818:1ced1b24

default

Download file

             user_edit_audit.mako
        
                    22 lines
            
             | 917 B
            
                | application/x-mako
            
             |
                MakoHtmlLexer
            
             / rhodecode / templates / admin / users / user_edit_audit.mako
          
                    History
                
                 |
                  Annotation
                 | Raw
                 |Copy content
                 |Copy permalink

      ## -*- coding: utf-8 -*-

      <%namespace name="base" file="/base/base.mako"/>

      <div class="panel panel-default">

          <div class="panel-heading">

            <h3 class="panel-title">${_('User Audit Logs')} -

            ${_ungettext('%s entry', '%s entries', c.audit_logs.item_count) % (c.audit_logs.item_count)}

            </h3>

          </div>

          <div class="panel-body">

              ${h.form(None, id_="filter_form", method="get")}

                  <input class="q_filter_box ${'' if c.filter_term else 'initial'}" id="j_filter" size="15" type="text" name="filter" value="${c.filter_term or ''}" placeholder="${_('audit filter...')}"/>

                  <input type='submit' value="${_('filter')}" class="btn" />

              ${h.end_form()}

              <p class="tooltip filterexample" style="position: inherit" title="${h.tooltip(h.journal_filter_help())}">${_('Example Queries')}</p>

              <%include file="/admin/admin_log_base.mako" />

          </div>

      </div>

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages

				## -- coding: utf-8 --
				<%namespace name="base" file="/base/base.mako"/>


				<div class="panel panel-default">
				<div class="panel-heading">
				<h3 class="panel-title">${_('User Audit Logs')} -
				${_ungettext('%s entry', '%s entries', c.audit_logs.item_count) % (c.audit_logs.item_count)}
				</h3>
				</div>
				<div class="panel-body">

				${h.form(None, id_="filter_form", method="get")}
				<input class="q_filter_box ${'' if c.filter_term else 'initial'}" id="j_filter" size="15" type="text" name="filter" value="${c.filter_term or ''}" placeholder="${_('audit filter...')}"/>
				<input type='submit' value="${_('filter')}" class="btn" />
				${h.end_form()}
				<p class="tooltip filterexample" style="position: inherit" title="${h.tooltip(h.journal_filter_help())}">${_('Example Queries')}</p>

				<%include file="/admin/admin_log_base.mako" />

				</div>
				</div>