1311 Commits

Author SHA1 Message Date
47ba5e18a3 Give users a "Re-check my subscription" button. 2017-05-04 18:15:35 +02:00
1a54b723aa Reworked subscription/demo role management from web to API level.
In the old situation, users had to be able to change their own roles. This
is inherently insecure.
2017-05-04 17:49:18 +02:00
d0557445cd Fix privilege escalation leak
A PUT request on /api/user/{user-id} by the user themselves would allow
too much, and would allow self-granting of roles (including admin),
group membership (so join any arbitrary project) and pretend to be
service accounts.
2017-05-04 12:48:30 +02:00
1ad3e7910c Upgrade algoliasearch 2017-04-11 12:08:57 +02:00
49895805e3 Display project description in instead of summary 2017-04-07 09:02:08 +02:00
bd3f8d597a Allow upload of videos > 1080p
Videos that are larger than 1920x1080 pixels are scaled down so that they
fit that size. Care is taken to keep the width a multiple of 16 pixels and
the height a multiple of 8.
2017-03-31 14:52:58 +02:00
c711a04e6c Added some type annotations (no functional differences) 2017-03-31 13:14:07 +02:00
1cb7a92e40 Removed old mock-EncoderJob and replaced it with a dict
The real value is a dict too, anyway.
2017-03-31 13:12:08 +02:00
d8640df115 Made markdown jinja filter None-safe 2017-03-30 09:37:48 +02:00
4c704c8cda Pipe description & content of featured nodes through markdown 2017-03-30 09:23:59 +02:00
6f9feea8a9 Locally hosting jstree, instead of linking to cloudflare.
Should speed up the site, and remove a possible point of failure.

This also upgrades JSTree to the latest version (3.3.3).
2017-03-29 16:57:26 +02:00
dde5526022 Updated HDRi specifics in the "join" page 2017-03-29 16:46:49 +02:00
34a6fb064c Removed illegal 'home_project' tag 2017-03-29 16:43:08 +02:00
cecc9bc7fb Added "Copy yaw" button to HDRIs
The button is only shown to people with the right to edit the current
node. I've also simplified some CSS, with the help of @venomgfx.
2017-03-28 18:11:08 +02:00
9ccf4474bc Fix for missing tag in Markdown validator 2017-03-28 17:54:10 +02:00
3622fad9c2 Merge remote-tracking branch 'origin/master' 2017-03-28 16:43:22 +02:00
c846ee9823 Add support for video tag 2017-03-28 16:43:12 +02:00
fd541d2243 Changed interpretation of '' in form handling of integer properties. 2017-03-28 16:04:40 +02:00
fcaa4fb936 Upgraded VRViewer:
- upgraded vrviewer to latest master (ffbc9ff4bf0c550cc79003ec188ca16e9e83c31e)
- added some notes on how to upgrade to the readme
- added support for setting default yaw angle
- added support for float properties
2017-03-28 16:04:26 +02:00
ddfb69edb2 group_hdri: remove double title 2017-03-28 14:08:15 +02:00
fac56943ee group_hdri: remove unused preview
This div contained the same image as otherwise shown, except that it was
never shown.
2017-03-28 14:08:15 +02:00
8330488c0a group_hdri: show unpublished children for current user.
Previously you weren't even allowed to see your own "pending" items.
2017-03-28 14:08:15 +02:00
6001f1936c Tweak to utm_source handling 2017-03-24 17:14:29 +01:00
46c019a758 Add support for utm_source 2017-03-24 11:47:12 +01:00
b2ed441bf7 Fix width of node add/edit 2017-03-23 18:53:39 +01:00
373be03c80 Groups: browse type list tweaks to match browse as icons 2017-03-23 18:53:24 +01:00
ce5e27814a Blog: Fix top bar not full width 2017-03-23 18:52:24 +01:00
24468159e7 Gulp: Only cache templates/scripts if not gulping for production 2017-03-23 12:44:33 +01:00
7153c8adde Added mypy to requirements-dev.txt 2017-03-23 12:07:03 +01:00
41414319a5 Merge branch 'master' into wip-storage-backend 2017-03-23 12:06:36 +01:00
a3513aa45c Update background for Agent 327 on join pages 2017-03-22 21:56:43 +01:00
1ed31d26e5 Be more explicit in logging which video encoding service is used 2017-03-22 17:08:15 +01:00
b36dc63335 Added simple mocking test for GCS 2017-03-22 16:43:17 +01:00
c02c6d89b0 Removed unused import 2017-03-22 16:43:04 +01:00
563bb2c244 Added unittest for Bucket.copy_to_bucket() 2017-03-22 16:14:06 +01:00
6b526f6b53 Fixed bug in local file storage URL generation. 2017-03-22 16:05:38 +01:00
cce388049d Big refactoring of file storage handling
- Moved pillar.api.utils.{gcs,storage} to pillar.api.file_storage_backends
- Implemented GCS and local storage using abstract Bucket and Blob classes
- Removed file processing from the Blob class, and kept it in the
  file_storage/__init__.py class. That way storage and processing are
  kept separate.
2017-03-22 15:49:56 +01:00
fdfdd38c38 Removed route for direct GCS storage browsing 2017-03-22 15:49:52 +01:00
56b631d4a2 Added type annotations 2017-03-22 15:49:52 +01:00
6eadc09c10 Use __init_subclass__ to register storage backends
See https://docs.python.org/3.6/whatsnew/3.6.html#pep-487-simpler-customization-of-class-creation
2017-03-22 15:49:52 +01:00
1f3d699a0c Ran 2to3 on pillar/api/utils/storage.py 2017-03-22 15:49:52 +01:00
0eb2f17624 Raise exception on not-implemented methods, instead of just pass'ing 2017-03-22 15:49:52 +01:00
47eba6786a Renamed 'file_in_storage' to 'blob' 2017-03-22 15:49:52 +01:00
ec1db0a725 Groups view: Background gradient gray doesn't look good 2017-03-22 15:49:51 +01:00
04a235ca12 Larger image for collections header 2017-03-22 15:49:51 +01:00
5b59d6b6b1 Slightly bigger thumbnail size for posts in homepage 2017-03-22 15:49:51 +01:00
0e6bdf9467 Update CSS caches 2017-03-22 15:49:51 +01:00
6d1f81b26a Minor tweaks to homepage listing
Thumbnails are now slightly larger (22px wider), and did some rearrangement
2017-03-22 15:49:51 +01:00
a000176db9 Tweaks to group listing
Non-square thumbnails, always display icon type
2017-03-22 15:49:51 +01:00
9f49140230 Video Player: Vertical volume slider and loop by default 2017-03-22 15:49:51 +01:00