bezronczek
/
website
forked from nonshy/website
1
0
Fork 0
Code Pull Requests Activity
246 Commits
1 Branch
0 Tags
17 MiB
Commit Graph

246 Commits (main)

Author SHA1 Message Date
Noah Petherbridge de30f5e952 See who has "Liked" something 2023-09-13 21:28:38 -07:00
Noah Petherbridge 3543dd3e42 Allow updating birthdate, with admin report 2023-09-11 19:24:09 -07:00
Noah Petherbridge 7d3e04b869 Fix age min/max filter on search page 2023-09-10 12:07:16 -07:00
Noah Petherbridge 1e7ea6830c Reserved username check on signup page 2023-09-09 12:26:51 -07:00
Noah Petherbridge 618acc9f92 Update reserved usernames 2023-09-09 12:23:54 -07:00
Noah Petherbridge de71d65be6 Only admin users can see banned accounts on search 2023-09-09 11:16:43 -07:00
Noah Petherbridge e4c1142d55 More thorough blocking behavior 2023-09-05 13:57:56 -07:00
Noah Petherbridge b619e0c02e Send inner circle status as VIP to BareRTC 2023-09-03 12:08:45 -07:00
Noah Petherbridge 6b0246edad Tweak private share badges 2023-09-01 23:07:15 -07:00
Noah Petherbridge 2d7f8c0d87 Fix private grants page 2023-09-01 22:41:33 -07:00
Noah Petherbridge 944dbb749b Private photos: see who shares back 2023-09-01 22:27:18 -07:00
Noah Petherbridge 577c92386e Filter for expressly non-certified 2023-09-01 17:20:34 -07:00
Noah Petherbridge 444699632a Minor fix 2023-09-01 17:14:57 -07:00
Noah Petherbridge 67a54c866e New search filters and friendship sent icon 2023-09-01 17:13:10 -07:00
Noah Petherbridge c8d09e6a17 Update admin icon from gavel to peace 2023-08-30 13:30:24 -07:00
Noah Petherbridge 8275cc3ad9 Bugfix on search page 2023-08-29 21:14:06 -07:00
Noah Petherbridge 6eb51cf545 Filter member directory by HereFor 2023-08-29 21:10:00 -07:00
Noah Petherbridge f52fa47f3e More profile settings for HereFor 2023-08-29 20:40:23 -07:00
Noah Petherbridge 6c11661058 Tweak the top navbar on desktop screens 2023-08-29 20:20:19 -07:00
Noah Petherbridge 9f145c2f5e Tweak the login rate limiter 2023-08-20 20:58:51 -07:00
Noah Petherbridge 3f500cd019 Truncate location precision on RefreshGeoIP() 2023-08-20 10:25:13 -07:00
Noah Petherbridge 6dc84bed33 Minor typo 2023-08-19 21:26:31 -07:00
Noah Petherbridge a785b093e7 Tweaks to Who's Nearby 2023-08-19 21:09:23 -07:00
Noah Petherbridge cc628afd44 Who's Nearby Feature 2023-08-19 19:11:33 -07:00
Noah Petherbridge 73f89c7837 Chat country flags: stop at first subdivision 2023-08-17 18:47:52 -07:00
Noah Petherbridge bf71ed421c Maintenance Mode + Blockable Admin Scope 2023-08-16 22:09:04 -07:00
Noah Petherbridge 5f5fe37350 Chat reports: attach target user ID table 2023-08-16 17:30:39 -07:00
Noah Petherbridge dc5b82b59a Get better country and subdivision names 2023-08-15 21:08:07 -07:00
Noah Petherbridge 001477de61 Test chat room flags some more 2023-08-15 21:03:41 -07:00
Noah Petherbridge ece83a0b23 Test update to chat country flags 2023-08-15 20:56:22 -07:00
Noah Petherbridge 1ee8acf060 Various quick fixes 
* Signup: if entering an existing email, don't admit that the email
  exists. Instead, send a specialized email to its address.
* Search: no longer search for users by email address.
* Login: always hash the incoming password on user not found, to take
  constant time compared to when the user did exist.
* Fix a pagination bug when a private (shy account) views a non-friend's
  photo gallery.
 2023-08-15 17:33:33 -07:00
Noah Petherbridge 868aef6fb0 Minor bugfix 2023-08-15 09:53:59 -07:00
Noah Petherbridge 4c398c9b13 Minor bugfix 2023-08-15 09:53:13 -07:00
Noah Petherbridge 666d3105b7 Privacy Improvements and Notification Fixes 
* On user profile pages and gallery: the total photo count for the user
  will only include photos that the viewer can actually see (taking into
  account friendship and private grants), so that users won't harass
  each other to see the additional photos that aren't visible to them.
* On the member directory search: the photo counts will only show public
  photos on their page for now, and may be fewer than the number of
  photos the current user could actually see.
* Blocklist: you can now manually add a user by username to your block
  list. So if somebody blocked you on the site and you want to block
  them back, there is a way to do this.
* Friends: you can now directly unfriend someone from their profile
  page by clicking on the "Friends" button. You get a confirmation
  popup before the remove friend action goes through.
* Bugfix: when viewing a user's gallery, you were able to see their
  Friends-only photos if they granted you their Private photo access,
  even if you were not their friend.
* Bugfix: when uploading a new private photo, instead of notifying
  everybody you granted access to your privates it will only notify
  if they are also on your friend list.
 2023-08-14 18:50:34 -07:00
Noah Petherbridge 47859ee204 Don't spam admins with chat room reports 2023-08-13 20:47:16 -07:00
Noah Petherbridge f8487f92e7 Log when a user tried to block an admin 2023-08-12 23:23:49 -07:00
Noah Petherbridge 4d1a057a73 Signup page: check for username uniqueness 2023-08-12 22:37:09 -07:00
Noah Petherbridge be0d401de8 Update TOS page 2023-08-12 22:18:23 -07:00
Noah Petherbridge d37ab56f26 Tweak email formatting for chat room reports 2023-08-12 21:47:33 -07:00
Noah Petherbridge 8ac63bf800 Webhook for BareRTC Report endpoint 2023-08-12 21:37:11 -07:00
Noah Petherbridge 317f43fee4 Update chat entry page: remove beta mention, add rules 2023-08-11 19:47:20 -07:00
Noah Petherbridge 1badee3662 Bugfix: don't unset dm_privacy on profile settings update 2023-08-10 19:37:49 -07:00
Noah Petherbridge 79a6b8048c Fix country flag with code for chat room 2023-08-05 20:11:55 -07:00
Noah Petherbridge 0c5db949aa Country Flags and Genders for the chat room 2023-08-05 19:37:15 -07:00
Noah Petherbridge 22d485156f Update verbiage for removing notifications 2023-08-04 19:41:14 -07:00
Noah Petherbridge 09497d3e52 Gate uploading a cert photo if you have no profile photo 2023-08-04 19:35:53 -07:00
Noah Petherbridge fdc410c9f1 Clear/Delete Notifications, Private Photo Fixes 
Added the ability to delete or clear notifications.
* A "Clear all" button deletes them all (with confirmation)
* A "Remove" button on individual notifications (one confirmation per
  page load, so you can remove several without too much tedium)

Fix some things regarding private photo notifications:
* When notifying your existing grants about a new upload, only users who
  opt-in for Explicit are notified about Explicit private pictures.
* When revoking private grants, clean up the "has uploaded a new private
  photo" notifications for all of your pics from their notification
  feeds.
 2023-08-04 18:54:04 -07:00
Noah Petherbridge 47aaf15078 Admin Groups & Permissions 
Add a permission system for admin users so you can lock down specific admins to
a narrower set of features instead of them all having omnipotent powers.

* New page: Admin Dashboard -> Admin Permissions Management
* Permissions are handled in the form of 'scopes' relevant to each feature or
  action on the site. Scopes are assigned to Groups, and in turn, admin user
  accounts are placed in those Groups.
* The Superusers group (scope '*') has wildcard permission to all scopes. The
  permissions dashboard has a create-once action to initialize the Superusers
  for the first admin who clicks on it, and places that admin in the group.

The following are the exhaustive list of permission changes on the site:

* Moderator scopes:
    * Chat room (enter the room with Operator permission)
    * Forums (can edit or delete user posts on the forum)
    * Photo Gallery (can see all private/friends-only photos on the site
      gallery or user profile pages)
* Certification photos (with nuanced sub-action permissions)
    * Approve: has access to the Pending tab to act on incoming pictures
    * List: can paginate thru past approved/rejected photos
    * View: can bring up specific user cert photo from their profile
    * The minimum requirement is Approve or else no cert photo page
      will load for your admin user.
* User Actions (each action individually scoped)
    * Impersonate
    * Ban
    * Delete
    * Promote to admin
* Inner circle whitelist: no longer are admins automatically part of the
  inner circle unless they have a specialized scope attached.

The AdminRequired decorator may also apply scopes on an entire admin route.
The following routes have scopes to limit them:

* Forum Admin (manage forums and their settings)
* Remove from inner circle
 2023-08-01 20:39:48 -07:00
Noah Petherbridge 01317a7ff8 Admin certification page improvements 2023-07-31 20:03:21 -07:00
Noah Petherbridge 98c6a51951 Bugfix on chat URL 2023-07-30 10:56:14 -07:00