Commit Graph

12 Commits (0434e8b78b124786fd3d727541c78294882b9737)

Author SHA1 Message Date
David Barragán Merino 8dbd3df40e Update copyright 2017-02-20 17:58:01 +01:00
David Barragán Merino 549c022bf8 Add license disclaimer to some files 2016-06-21 11:00:02 +02:00
David Barragán Merino 47907eedb4 Apply PEP-263 to taiga project 2016-05-30 20:41:40 +02:00
David Barragán Merino cc8e5f39b7 Change membership.is_owner to membership.is_admin 2016-02-17 19:21:13 +01:00
Alejandro Alonso 26d10ca7a3 Fixing attachments with long names 2016-02-17 10:55:03 +01:00
Jesús Espino c328414b4d Fixing a lot of flake8 errors on tests 2015-02-24 19:54:10 +01:00
Alejandro Alonso c285857844 Refactoring owner permissions, now only is_owner memberships are considered as owner users 2014-11-25 18:51:58 +01:00
Andrey Antukh 6224a9d4ce Improve attachments factories and fix tests related to storage refactor. 2014-09-17 15:05:10 +02:00
Andrey Antukh 0b375be614 Replace direct JSONRender usage with taiga own json module on all tests.
So unify the json interface in all tests code.
2014-09-06 02:00:09 +02:00
Andrey Antukh 4f27a8ba4d Fix affected tests to previous attachment fixes. 2014-09-06 00:43:32 +02:00
Jesús Espino d97edb464c [HUGE CHANGE] Changed the permissions system 2014-07-24 12:19:06 +02:00
Anler Hp 52f476fb34 Check permissions when accessing attachments
Attachment files dispatching is now done through `RawAttachmentView`
view that checks for appropiate permissions.

When using the development server this view just redirects to the real
media path of the file.

When using the production server the special redirection header
`X-Accel-Redirect` is used instead to improve efficiency by instructing
the server to dispatch the file instead of django, but you also need the
following configuration (Nginx):

location /attachment-files {
    internal;
    alias /path/to/taiga/media/attachment-files;
}

It's recommended to also restrict the direct access from outside to the
`attachment-files` directory by using some configuration like this:

location /media/attachment-files {
    deny all;
}
2014-07-04 12:15:48 +02:00