Commit Graph

119 Commits

Author SHA1 Message Date
Noah Petherbridge
1ee8acf060 Various quick fixes
* Signup: if entering an existing email, don't admit that the email
  exists. Instead, send a specialized email to its address.
* Search: no longer search for users by email address.
* Login: always hash the incoming password on user not found, to take
  constant time compared to when the user did exist.
* Fix a pagination bug when a private (shy account) views a non-friend's
  photo gallery.
2023-08-15 17:33:33 -07:00
Noah Petherbridge
666d3105b7 Privacy Improvements and Notification Fixes
* On user profile pages and gallery: the total photo count for the user
  will only include photos that the viewer can actually see (taking into
  account friendship and private grants), so that users won't harass
  each other to see the additional photos that aren't visible to them.
* On the member directory search: the photo counts will only show public
  photos on their page for now, and may be fewer than the number of
  photos the current user could actually see.
* Blocklist: you can now manually add a user by username to your block
  list. So if somebody blocked you on the site and you want to block
  them back, there is a way to do this.
* Friends: you can now directly unfriend someone from their profile
  page by clicking on the "Friends" button. You get a confirmation
  popup before the remove friend action goes through.
* Bugfix: when viewing a user's gallery, you were able to see their
  Friends-only photos if they granted you their Private photo access,
  even if you were not their friend.
* Bugfix: when uploading a new private photo, instead of notifying
  everybody you granted access to your privates it will only notify
  if they are also on your friend list.
2023-08-14 18:50:34 -07:00
Noah Petherbridge
4d1a057a73 Signup page: check for username uniqueness 2023-08-12 22:37:09 -07:00
Noah Petherbridge
be0d401de8 Update TOS page 2023-08-12 22:18:23 -07:00
Noah Petherbridge
317f43fee4 Update chat entry page: remove beta mention, add rules 2023-08-11 19:47:20 -07:00
Noah Petherbridge
22d485156f Update verbiage for removing notifications 2023-08-04 19:41:14 -07:00
Noah Petherbridge
09497d3e52 Gate uploading a cert photo if you have no profile photo 2023-08-04 19:35:53 -07:00
Noah Petherbridge
fdc410c9f1 Clear/Delete Notifications, Private Photo Fixes
Added the ability to delete or clear notifications.
* A "Clear all" button deletes them all (with confirmation)
* A "Remove" button on individual notifications (one confirmation per
  page load, so you can remove several without too much tedium)

Fix some things regarding private photo notifications:
* When notifying your existing grants about a new upload, only users who
  opt-in for Explicit are notified about Explicit private pictures.
* When revoking private grants, clean up the "has uploaded a new private
  photo" notifications for all of your pics from their notification
  feeds.
2023-08-04 18:54:04 -07:00
Noah Petherbridge
47aaf15078 Admin Groups & Permissions
Add a permission system for admin users so you can lock down specific admins to
a narrower set of features instead of them all having omnipotent powers.

* New page: Admin Dashboard -> Admin Permissions Management
* Permissions are handled in the form of 'scopes' relevant to each feature or
  action on the site. Scopes are assigned to Groups, and in turn, admin user
  accounts are placed in those Groups.
* The Superusers group (scope '*') has wildcard permission to all scopes. The
  permissions dashboard has a create-once action to initialize the Superusers
  for the first admin who clicks on it, and places that admin in the group.

The following are the exhaustive list of permission changes on the site:

* Moderator scopes:
    * Chat room (enter the room with Operator permission)
    * Forums (can edit or delete user posts on the forum)
    * Photo Gallery (can see all private/friends-only photos on the site
      gallery or user profile pages)
* Certification photos (with nuanced sub-action permissions)
    * Approve: has access to the Pending tab to act on incoming pictures
    * List: can paginate thru past approved/rejected photos
    * View: can bring up specific user cert photo from their profile
    * The minimum requirement is Approve or else no cert photo page
      will load for your admin user.
* User Actions (each action individually scoped)
    * Impersonate
    * Ban
    * Delete
    * Promote to admin
* Inner circle whitelist: no longer are admins automatically part of the
  inner circle unless they have a specialized scope attached.

The AdminRequired decorator may also apply scopes on an entire admin route.
The following routes have scopes to limit them:

* Forum Admin (manage forums and their settings)
* Remove from inner circle
2023-08-01 20:39:48 -07:00
Noah Petherbridge
01317a7ff8 Admin certification page improvements 2023-07-31 20:03:21 -07:00
Noah Petherbridge
af917fed51 Update privacy policy 2023-07-27 22:45:55 -07:00
Noah Petherbridge
67ec9e5ce3 Various small website tweaks
* Add they/them as example pronouns on the Edit Profile page and make
  the examples clickable to fill them in easily.
* When viewing a photo gallery and you opt-out of explicit, have a link
  to your settings page to opt-in.
* Update the rules on the homepage and signup page.
* Add a notice on DM pages about the privacy policy and TOS.
2023-07-27 20:19:50 -07:00
Noah Petherbridge
bfa883e059 Privacy Policy & TOS Updates 2023-07-27 20:19:37 -07:00
Noah Petherbridge
61249ac9f1 Pager on bottom of forum thread views too 2023-07-23 16:37:11 -07:00
Noah Petherbridge
61011efd9f Photo counts on member directory + inner circle removal privacy fix 2023-07-23 15:02:41 -07:00
Noah Petherbridge
356f94698f Some bugfixes around profile picture cropping 2023-07-22 11:52:05 -07:00
Noah Petherbridge
12dcc10ff3 Mastodon profile link 2023-07-20 12:41:57 -07:00
Noah Petherbridge
82fe684d11 Safety check on Likes 2023-07-18 22:30:29 -07:00
Noah Petherbridge
77bbea38cc Typos 2023-06-27 09:02:44 -07:00
Noah Petherbridge
9474625969 Update the About, Features and FAQ pages 2023-06-26 23:29:05 -07:00
Noah Petherbridge
a0384e0d39 Minor tweak to notifications for GIFs 2023-06-25 23:12:44 -07:00
Noah Petherbridge
7aa2310a6d GIFs showing correctly in Notifications 2023-06-25 23:09:43 -07:00
Noah Petherbridge
7d4326e251 Fix GIF and PNG uploads 2023-06-25 23:03:41 -07:00
Noah Petherbridge
e051da21b5 Support GIF videos in your photo gallery 2023-06-25 22:55:07 -07:00
Noah Petherbridge
c172565a56 Geo-gating on signup 2023-06-24 15:39:45 -07:00
Noah Petherbridge
45cb4d260e DM Privacy + Settings Page Tabs
* Refactor the Settings page into a tabbed UI to reduce confusion with
  all the different forms and save buttons
* Add a DM Privacy setting to your page
* Update the About page
2023-06-23 22:18:09 -07:00
Noah Petherbridge
0f6b627156 Spit and polish
* Refactor pagination into a DRY template func
* Better guide users with no profile pic to upload one
2023-06-21 20:46:27 -07:00
Noah Petherbridge
2439c714e5 Notifications: make the Like button a button to avoid hyperlink issue 2023-06-21 18:36:42 -07:00
Noah Petherbridge
16da91ce1e Notifications like button bugfix 2023-06-17 00:42:28 +00:00
Noah Petherbridge
ae8ef83115 Option to hide age from profile display 2023-06-16 17:11:52 -07:00
Noah Petherbridge
eed3e2f43b Mobile input assist for age gate page 2023-06-16 13:40:43 -07:00
Noah Petherbridge
d36e71549a Age gate: collect birthdates retroactively and on new signup 2023-06-16 13:05:33 -07:00
Noah Petherbridge
3d34306c7e Better comment notification links 2023-06-15 19:40:40 -07:00
Noah Petherbridge
70d252dd75 Like buttons in photo notifications 2023-06-15 19:06:16 -07:00
Noah Petherbridge
b262ac4be6 Better chat stats on landing page 2023-06-10 13:25:06 -07:00
Noah Petherbridge
78abee6e9e Online users badge in the Chat link on nav bar 2023-06-07 21:59:15 -07:00
Noah Petherbridge
50d05f92f1 Fix Gallery checkbox always checking itself + small fixes 2023-05-24 18:40:27 -07:00
Noah Petherbridge
e6388de589 Style cleanup 2023-05-24 15:02:45 -07:00
Noah Petherbridge
eccc4f0044 Update some wording 2023-05-24 11:35:22 -07:00
Noah Petherbridge
536bc97a68 Update some wording 2023-05-24 11:31:25 -07:00
Noah Petherbridge
6cad3cadc7 Inner circle followups: notifications, min public pictures 2023-05-24 11:27:42 -07:00
Noah Petherbridge
f7b7eabf01 CSS fixes 2023-05-23 23:26:34 -07:00
Noah Petherbridge
6bb9b10f56 Update some wording 2023-05-23 23:21:14 -07:00
Noah Petherbridge
37814efa15 Minor fixes for inner circle 2023-05-23 22:40:06 -07:00
Noah Petherbridge
3b3616f0c9 Inner circle bugfixes 2023-05-23 20:15:26 -07:00
Noah Petherbridge
9788ea6a33 The inner circle 2023-05-23 20:04:17 -07:00
Noah Petherbridge
2b07b98bb5 Update chat landing page 2023-03-31 17:40:48 -07:00
Noah Petherbridge
f98b6b2806 Notifications about new photo uploads for your friends 2023-03-16 20:04:43 -07:00
Noah Petherbridge
df65b1b260 Bugfixes around banned user accounts 2023-03-09 16:57:38 -08:00
Noah Petherbridge
0cdfcbb976 Update TOS and FAQ pages 2023-03-08 13:43:33 -08:00