Redmine

2014-09-13

15:16 Redmine Feature #17857 (New): Custom fields for repositories

Attaching custom fields to repositories would allow, along with a repository REST API (see #11977), to write smart cu... Guillaume Perréal

15:10 Redmine Feature #11977: REST API for repositories

I would like to see this feature implemented too. It would allow to write a proper implementation of a remote reposit... Guillaume Perréal

2014-03-03

14:15 Redmine Defect #16208 (Closed): Rails vulnerability -- update to 3.2.17

According to this "announce":http://weblog.rubyonrails.org/2014/2/18/Rails_3_2_17_4_0_3_and_4_1_0_beta2_have_been_rel... Guillaume Perréal

2011-11-16

00:39 Redmine Defect #9566: Redmine.pm considers all projects private when login_required is enabled

There is a small typo in the subquery: it selects @member_roles.id@ where it should be @member_roles.role_id@. Once f... Guillaume Perréal

2011-11-15

20:02 Redmine Defect #9566: Redmine.pm considers all projects private when login_required is enabled

I think "cast(projects.is_public as CHAR) IN ('t', '1')" could be handled as "projects.is_public" since it should be ... Guillaume Perréal

00:44 Redmine Defect #9566: Redmine.pm considers all projects private when login_required is enabled

With r7808, providing any login/password always allows reading on public projects, even if the user does not exist or... Guillaume Perréal

13:15 Redmine Patch #9579 (New): Redmine.pm: crediential cache expiration

Here is little patch that allows to set a expiration delay on cached credentials, so they eventually get updated.
... Guillaume Perréal

00:37 Redmine Defect #9567: Redmine.pm potential security issue with cache credential enabled and subversion

Confirmed. It indeed denies MKACTIVITY in this test case. Guillaume Perréal

2011-11-14

20:40 Redmine Defect #9567 (Closed): Redmine.pm potential security issue with cache credential enabled and subversion

Redmine.pm credential cache is based only on project, user and password, ignoring permissions (or at least read/write... Guillaume Perréal

20:26 Redmine Defect #9566 (Closed): Redmine.pm considers all projects private when login_required is enabled

When the "login_required" setting is enabled, Redmine.pm consider all projects as private, which prevents non-member ... Guillaume Perréal