Guillaume Perréal

  • Registered on: 2011-11-12
  • Last connection: 2016-02-05

Activity

Reported issues: 5

2014-09-13

15:16 Redmine Feature #17857 (New): Custom fields for repositories
Attaching custom fields to repositories would allow, along with a repository REST API (see #11977), to write smart cu...
15:10 Redmine Feature #11977: REST API for repositories
I would like to see this feature implemented too. It would allow to write a proper implementation of a remote reposit...

2014-03-03

14:15 Redmine Defect #16208 (Closed): Rails vulnerability -- update to 3.2.17
According to this "announce":http://weblog.rubyonrails.org/2014/2/18/Rails_3_2_17_4_0_3_and_4_1_0_beta2_have_been_rel...

2011-11-15

00:39 Redmine Defect #9566: Redmine.pm considers all projects private when login_required is enabled
There is a small typo in the subquery: it selects @member_roles.id@ where it should be @member_roles.role_id@. Once f...
20:02 Redmine Defect #9566: Redmine.pm considers all projects private when login_required is enabled
I think "cast(projects.is_public as CHAR) IN ('t', '1')" could be handled as "projects.is_public" since it should be ...
13:15 Redmine Patch #9579 (New): Redmine.pm: crediential cache expiration
Here is little patch that allows to set a expiration delay on cached credentials, so they eventually get updated.
...

2011-11-14

00:44 Redmine Defect #9566: Redmine.pm considers all projects private when login_required is enabled
With r7808, providing any login/password always allows reading on public projects, even if the user does not exist or...
00:37 Redmine Defect #9567: Redmine.pm potential security issue with cache credential enabled and subversion
Confirmed. It indeed denies MKACTIVITY in this test case.
20:40 Redmine Defect #9567 (Closed): Redmine.pm potential security issue with cache credential enabled and subv...
Redmine.pm credential cache is based only on project, user and password, ignoring permissions (or at least read/write...
20:26 Redmine Defect #9566 (Closed): Redmine.pm considers all projects private when login_required is enabled
When the "login_required" setting is enabled, Redmine.pm consider all projects as private, which prevents non-member ...

Also available in: Atom