Martin Brennan 6e2be3e60b FIX: When admin changes an email for the user the user must confirm the change (#10830) ... See https://meta.discourse.org/t/changing-a-users-email/164512 for additional context. Previously when an admin user changed a user's email we assumed that they would need a password reset too because they likely did not have access to their account. This proved to be incorrect, as there are other reasons a user needs admin to change their email. This PR: * Changes the admin change email for user flow so the user is sent an email to confirm the change * We now record who the email change request was requested by * If the requested by user is admin and not the user we note this in the email sent to the user * We also make the confirm change email route open to anonymous users, so it can be clicked by the user even if they do not have access to their account. If there is a logged in user we make sure the confirmation matches the current user.		2020-10-07 13:02:24 +10:00
..
admin	FEATURE: Allow admins to delete user SSO records in the UI (#10669)	2020-09-15 10:00:10 -04:00
users	FIX: Correctly redirect after external login on subfolder sites (#10529)	2020-08-26 15:52:21 +01:00
about_controller.rb	Revert "Revert "Merge branch 'master' of https://github.com/discourse/discourse""	2020-05-23 00:56:13 -04:00
application_controller.rb	FIX: move hp request from /users to /token (#10795)	2020-10-02 09:01:40 +10:00
badges_controller.rb	FEATURE: add noindex header to badges, groups, and /my pages (#9736)	2020-05-11 15:05:42 +10:00
bookmarks_controller.rb	FEATURE: Add "delete on owner reply" bookmark functionality (#10231)	2020-07-21 10:00:39 +10:00
bootstrap_controller.rb	Add extra locales to bootstrap.json	2020-09-23 14:48:52 -04:00
categories_controller.rb	DEV: Improve API usage when creating * updating categories	2020-08-12 12:28:29 -06:00
clicks_controller.rb	DEV: enable frozen string literal on all files	2019-05-13 09:31:32 +08:00
composer_messages_controller.rb	DEV: Upgrading Discourse to Zeitwerk (#8098)	2019-10-02 14:01:53 +10:00
csp_reports_controller.rb	DEV: Only include "report-sample" CSP directive when reporting is enabled (#9337)	2020-04-02 11:16:38 -04:00
directory_items_controller.rb	FEATURE: Added sort by username for directory items (#10482)	2020-08-26 10:14:20 -04:00
draft_controller.rb	FEATURE: composer option to reload page and force save draft (#10773)	2020-09-29 22:29:03 +05:30
drafts_controller.rb	SECURITY: Respect topic permissions when loading draft metadata	2020-03-23 11:30:40 +00:00
email_controller.rb	FIX: set mailing_list_mode to false when unsubscribing from all (#10354)	2020-08-03 16:59:54 +10:00
embed_controller.rb	SECURITY: Bound the amount of work that embed#topics can do	2020-07-20 13:25:34 +01:00
exceptions_controller.rb	FEATURE: Add site setting to show more detailed 404 errors. (#8014)	2019-10-08 14:15:08 +03:00
export_csv_controller.rb	DEV: Switch to new ExportUserArchive job	2020-08-28 11:46:53 -07:00
extra_locales_controller.rb	FIX: Better error handling for invalid locale bundle versions	2019-11-11 22:30:32 +01:00
finish_installation_controller.rb	DEV: update rubocop to version 0.77	2019-12-10 11:48:39 +11:00
forums_controller.rb	DEV: shutdown_ok parameter to /srv/status	2020-03-09 14:06:13 -07:00
groups_controller.rb	FIX: Preload uploads in groups#search to stop N+1 (#10814)	2020-10-05 10:22:55 +02:00
hashtags_controller.rb	DEV: Merge category and tag hashtags code paths (#10216)	2020-07-13 19:13:17 +03:00
highlight_js_controller.rb	FIX: highlightjs 10 requires some languages to be loaded before others (#10584)	2020-09-02 21:32:57 +02:00
inline_onebox_controller.rb	FIX: Make inline oneboxes work with secured topics in secured contexts (#8895)	2020-02-12 12:11:28 +02:00
invites_controller.rb	FIX: better error message if invite is expired (#10783)	2020-09-30 20:32:33 +05:30
list_controller.rb	FIX: if no group is found, raise correct error	2020-09-21 10:27:08 +10:00
metadata_controller.rb	PERF: cache all metadata for 60 seconds	2020-07-01 12:58:02 +10:00
notifications_controller.rb	FIX: Typo in NotificationsController#index not caught by tests.	2020-07-22 09:22:26 +08:00
offline_controller.rb	DEV: enable frozen string literal on all files	2019-05-13 09:31:32 +08:00
onebox_controller.rb	FIX: Cache failed onebox URL request server-side (#8421)	2019-11-28 07:48:29 +10:00
permalinks_controller.rb	FIX: Check for permalinks before showing the 404 page	2020-03-23 16:31:07 -07:00
post_action_users_controller.rb	FEATURE: Don't display muted/ignored users under "who liked" (#10084)	2020-06-19 10:44:21 -04:00
post_actions_controller.rb	DEV: Upgrading Discourse to Zeitwerk (#8098)	2019-10-02 14:01:53 +10:00
post_readers_controller.rb	DEV: '= true' is not necessary	2019-12-03 11:32:45 -03:00
posts_controller.rb	FIX: use allowlist and blocklist terminology (#10209)	2020-07-27 10:23:54 +10:00
published_pages_controller.rb	FIX: use normal logo in published pages if small not available.	2020-09-21 09:20:39 +05:30
push_notification_controller.rb	DEV: enable frozen string literal on all files	2019-05-13 09:31:32 +08:00
qunit_controller.rb	DEV: enable frozen string literal on all files	2019-05-13 09:31:32 +08:00
reviewable_claimed_topics_controller.rb	FEATURE: Allow group moderators to close/archive topics	2020-07-14 12:36:19 -04:00
reviewables_controller.rb	FIX: sync reviewable count when opening the hamburger menu (#10368)	2020-08-07 18:13:02 +02:00
robots_txt_controller.rb	FIX: Remove additional paths from robots.txt	2020-08-26 16:52:22 -04:00
safe_mode_controller.rb	FEATURE: Always disable customizations on the /safe-mode route (#9052)	2020-02-28 10:53:11 +00:00
search_controller.rb	PERF: Remove one extra call to Redis when searching.	2020-08-04 14:02:02 +08:00
session_controller.rb	FIX: move hp request from /users to /token (#10795)	2020-10-02 09:01:40 +10:00
similar_topics_controller.rb	PERF: Avoid parsing Post#cooked with Nokogiri for every search.	2020-07-24 10:43:09 +08:00
site_controller.rb	DEV: Upgrading Discourse to Zeitwerk (#8098)	2019-10-02 14:01:53 +10:00
static_controller.rb	DEV: Reduce logging level when logging favicon download failures.	2020-07-29 09:42:55 +08:00
steps_controller.rb	DEV: Upgrading Discourse to Zeitwerk (#8098)	2019-10-02 14:01:53 +10:00
stylesheets_controller.rb	FEATURE: User selectable color schemes (#10544)	2020-08-28 10:36:52 -04:00
svg_sprite_controller.rb	DEV: Allow 3-digit HEX color code in single icon route	2020-05-14 16:37:45 -04:00
tag_groups_controller.rb	DEV: Tag group improvements (#8252)	2019-10-30 16:57:13 +01:00
tags_controller.rb	DEV: Refactor draft attributes for CategoryList and TopicList.	2020-07-24 10:11:30 +08:00
theme_javascripts_controller.rb	DEV: pluck_first	2019-10-21 12:08:20 +01:00
topics_controller.rb	SECURITY: Ensure users can see the topic before setting a topic timer. (#10841)	2020-10-06 16:49:06 -03:00
uploads_controller.rb	FIX: Respect force download when downloading secure media via lightbox (#10769)	2020-09-29 12:12:03 +10:00
user_actions_controller.rb	FEATURE: Quick access panels in user menu (#8073)	2019-09-09 11:03:57 -04:00
user_api_keys_controller.rb	DEV: Move UserApiKey scopes to dedicated table (#10704)	2020-09-29 10:57:48 +01:00
user_avatars_controller.rb	DEV: Switch letter avatar service to new domain (#10546)	2020-08-27 12:05:36 +01:00
user_badges_controller.rb	FIX: identify slug-less topic urls everywhere	2020-06-29 12:31:20 +02:00
users_controller.rb	FEATURE: explain why invites are disabled to staff users (#10810)	2020-10-03 13:05:26 +05:30
users_email_controller.rb	FIX: When admin changes an email for the user the user must confirm the change (#10830)	2020-10-07 13:02:24 +10:00
webhooks_controller.rb	FEATURE: IMAP delete email sync for group inboxes (#10392)	2020-08-12 10:16:26 +10:00
wizard_controller.rb	DEV: Upgrading Discourse to Zeitwerk (#8098)	2019-10-02 14:01:53 +10:00