Redmine

Today

08:16 Redmine Defect #13762: SCM auto status change bypassses roles and permissions

The attached patches make fix keywords and @@time@ logging in commit messages
respect the permissions of the committ... Jens Krämer

2026-10-26

05:34 Redmine Defect #44673 (Closed): "Lost password" function allows to set the same password again even if it was expired

Users can bypass the forced password expiry (which prevents reuse of the same password) by using the lost password fe... Jens Krämer

2026-10-06

07:53 Redmine Feature #44578 (Closed): Invalidate sessions and autologin tokens when an email address is changed or deleted

So far, changing or deleting an email address of a user deleted only their
password recovery tokens.
With this chan... Jens Krämer

2026-09-30

11:21 Redmine Patch #44559 (Closed): User bulk lock/unlock does not run callbacks

The bulk actions use @update_all@ to change the status which skips callbacks. As a result, the following things do no... Jens Krämer

2026-08-26

09:54 Redmine Feature #44337: Add an administration page listing all webhooks

Also, for an admin it might be of interest when a webhook was created, so maybe show that in the list as well? Jens Krämer

09:52 Redmine Feature #44337: Add an administration page listing all webhooks

I just had a look at this and I generally like it. However the patch is malformed (@patch: **** malformed patch at li... Jens Krämer

2026-08-24

11:25 Redmine Patch #44368 (Closed): Revert removal of user scope in 2FA backup code lookup

As it turns out, the @where(user_id:)@ scope prepended to @Token.find_token@ that was removed in #44074
was actually... Jens Krämer

2026-07-11

15:14 Redmine Patch #44259 (Closed): New context menu controller tests don't run with standard rake tasks

the tests under @test/functional/context_menus/@ do not follow the *_test.rb file name pattern and therefore are not ... Jens Krämer

2026-06-15

12:03 Redmine Patch #44169: Refactor context menus controller to namespaced sub-controllers

I think the Concern is the best of the 4 options. Dedicated finder objects (#4) are nice, but introducing this whole ... Jens Krämer

2026-05-21

03:25 Redmine Patch #44074 (Closed): ignored and unnecessary scope in twofa token lookup

When deleting the used twofa backup code there is this line:... Jens Krämer