Julien Cristau <julien.cristau@logilab.fr> [Thu, 02 Oct 2014 17:18:29 +0200] rev 10080
[web] stop accepting the magic __message form parameter
This has been deprecated for a while, and replaced by _cwmsgid, which
doesn't allow arbitrary content.
Julien Cristau <julien.cristau@logilab.fr> [Thu, 02 Oct 2014 16:34:38 +0200] rev 10079
[web/request] add security_enabled method
Just forward to the underlying repo connection. This can be useful in
the ORM when dealing with a "code-only" attribute, i.e. something that
shouldn't be directly user-visible but must be accessible from a web
request.
Rémi Cardona <remi.cardona@logilab.fr> [Tue, 18 Nov 2014 18:20:08 +0100] rev 10078
[dataimport] Fix use of _create_copyfrom_buffer() (related to #3845572)
This is used indirectly by SQLGenObjectStore when running on a
PostgreSQL database.
Regression introduced by commit 70056633085c.
David Douard <david.douard@logilab.fr> [Wed, 26 Mar 2014 14:45:33 +0100] rev 10077
[c-c configure] make it possible to specify the section for sources configuration (closes #3477678)
Julien Cristau <julien.cristau@logilab.fr> [Wed, 10 Sep 2014 11:34:32 +0200] rev 10076
[server] fix 'cnx' variable confusion in DBG_SQL exception case
The rollback handling expects 'cnx' to be the cubicweb Connection, but
the DBG_SQL block was replacing it with an sql connection, leading to
lulz down the line. Also remove obsolete getattr (the sqlite wrapping
is now done at the cnxset level, so cnx.cnxset.cnx should be the right
thing already).
Denis Laxalde <denis.laxalde@logilab.fr> [Thu, 20 Mar 2014 10:41:22 +0100] rev 10075
Provide sufficient context to check 'delete' permission in AjaxEditRelationCtxComponent
Call rdef.check only when both fromeid and toeid are available. Though only
call it once (for the first encountered related entity).
Factorize a bit to keep handling of CSS/JS addition the same.
Closes #3670209.