zulip/zerver
Tim Abbott 7d250cb2f9 attachment: Fix handling of stream history.
This fixes two issues:

* Our guest users feature gave guest users access to public stream
  attachments even if they couldn't access the public stream.

* After a user joins a private stream with our new shared history
  feature, they couldn't see images uploaded before they joined.

The tests need to check for a few types of issues:
* The actual access control permissions.
* How many database queries are used in the various
  cases for that second model, especially with multiple messages
  referencing an attachment.  This function gets called a lot, and we
  want to keep it fast.

Fixes #9372.
2018-06-06 09:40:22 -07:00
..
lib users: Replace duplication with generic func to validate user id. 2018-06-05 11:13:13 -07:00
management compilemessages: Use json.dump with sort_keys option. 2018-06-01 16:39:03 -07:00
migrations migrations: Remove dependence on PRIVATE_STREAM_HISTORY_FOR_SUBSCRIBERS. 2018-05-29 07:36:53 -07:00
openapi api docs: Read parameters and response fixtures from OpenAPI files. 2018-05-26 22:49:55 +02:00
templatetags templates: Make zulip_default_context available in API endpoints. 2018-06-01 11:32:18 -07:00
tests attachment: Fix handling of stream history. 2018-06-06 09:40:22 -07:00
tornado requirements: Upgrade pyflakes to 2.0.0. 2018-05-24 11:31:36 -07:00
views users: Replace duplication with generic func to validate user id. 2018-06-05 11:13:13 -07:00
webhooks webhooks/pagerduty: Update docs to conform to style guide. 2018-05-31 23:48:42 -04:00
worker tests: Disable slow query messages in test environment. 2018-05-20 10:16:53 -07:00
__init__.py
apps.py zerver: Use Python 3 syntax for typing. 2017-11-28 16:49:36 -08:00
context_processors.py two_factor: Add templates for 2-factor-auth setup. 2018-05-02 15:20:49 -07:00
decorator.py 2FA: Add zulip_otp_required decorator. 2018-05-23 15:46:57 -07:00
filters.py zerver: Use Python 3 syntax for typing. 2017-11-28 16:49:36 -08:00
forms.py ldap: Don't allow password reset for users in LDAP domain. 2018-05-28 22:47:47 -07:00
logging_handlers.py test_logging_handlers: Mock out `git describe` because can be slow. 2018-03-23 18:24:51 -07:00
middleware.py zerver: Change use of typing.Text to str. 2018-05-12 15:22:39 -07:00
models.py attachment: Fix handling of stream history. 2018-06-06 09:40:22 -07:00
signals.py emails: Fix spelling of "Unknown IP" and tag for translation. 2018-04-30 12:04:39 -07:00
static_header.txt