- Implement Alchemy v1.4
Field
changes
- Fix JSON-ified representation of
Permissions
not being handled by itscast
method properly - On development, always give preference to the
force_user_login
setting
- Upgrade to alchemy v1.4.0
- Use
Acl
model namespace for most models - Update a user's session data when updating the user record
- Show useful error when communication fails with proteus server
- Use correct displayfield for user models
- Add proteus verification-error page (shown when a remote login fails)
- Decouple some of the proteus logic from the global settings
- Fix proteus users not being found on login due to wrong field name
- Add remote-login with polling support for Proteus
- Make login form images configurable
- Make the
Permissions
field inherit fromField.Schema
& allow adding custom fields - Add support for logging in with
Proteus
remote auth server - Make
Conduit#notAuthorized()
use theAclStatic
controller to render the login form
- Add permission fields to chimera editor
- Make sure a user record has a password before trying to compare it
- Fix
Superuser
permission group not having any permissions by default - Use
al-
prefix for custom elements - Flatten the user's
permissions
property for the client-side
- Add
hasPermission(permission)
method to AclHelper & Permissions class
- Don't cast permissions twice
- Add new Permissions system
- Fix peerdependency version issue
- Add password field support for the alchemy-form plugin
- Fix Chimera error in AclRule model
- Move User's beforeSave logic to a method instead of an event
- Add title & description field to ACL Group model
- Move rule types into the Acl namespace
- Fix
Conduit
methods not being set properly
- Implement alchemy v1.1.3 fixes
- Make compatible with Alchemymvc v1.1.0
- Don't re-hash bcrypted passwords
- Add
not_authorized_template
andnot_authorized_ajax_template
options - Use regular acl/login template when auth attempt failed
- Pass
u
get parameter to join template - Use $pk instead of _id
- Destroy session on logout
- Allow forcing user login during development with the
force_user_login
setting - Don't query for
undefined
values, it doesn't work the same on all datasources - Allow setting a redirect_url parameter to the logout route
- Remove fingerprint when logging out
- Upgrade bcrypt dependency to 4.0.1
- Add
Model#getUserId()
method to get the user id on either client- or server-side
- Redesign login screen
- Set the
is_private
flag on theUser#password
field - Set a default page title on the login screen
- Fix setting the default password
- Remove stray
pr
call
- Use
alchemy.getCache()
instead ofexpirable
module
- Make compatible with alchemy v1.0.0
- Remove acpl cookie when logging out
- Show
acl/login_modal
when logging in over ajax - Don't create
UserModel
whencustom_model
has been set