Description:
hacked user creation to bypass member name validation, changed default config for test pair import
Commit status:
[Not Reviewed]
References:
Diff options:
Comments:
0 Commit comments
0 Inline Comments
Unresolved TODOs:
There are no unresolved TODOs
r261:432c3e723bef - - 2 files changed: 2 inserted, 1 deleted
@@ -1,88 +1,89 | |||||
|
1 | class UserAdminController < ApplicationController |
|
1 | class UserAdminController < ApplicationController |
|
2 |
|
2 | ||
|
3 | before_filter :admin_authorization |
|
3 | before_filter :admin_authorization |
|
4 |
|
4 | ||
|
5 | def index |
|
5 | def index |
|
6 | list |
|
6 | list |
|
7 | render :action => 'list' |
|
7 | render :action => 'list' |
|
8 | end |
|
8 | end |
|
9 |
|
9 | ||
|
10 | # GETs should be safe (see http://www.w3.org/2001/tag/doc/whenToUseGet.html) |
|
10 | # GETs should be safe (see http://www.w3.org/2001/tag/doc/whenToUseGet.html) |
|
11 | verify :method => :post, :only => [ :destroy, |
|
11 | verify :method => :post, :only => [ :destroy, |
|
12 | :create, :create_from_list, |
|
12 | :create, :create_from_list, |
|
13 | :update ], |
|
13 | :update ], |
|
14 | :redirect_to => { :action => :list } |
|
14 | :redirect_to => { :action => :list } |
|
15 |
|
15 | ||
|
16 | def list |
|
16 | def list |
|
17 | @users = User.find(:all) |
|
17 | @users = User.find(:all) |
|
18 | @hidden_columns = ['hashed_password', 'salt', 'created_at', 'updated_at'] |
|
18 | @hidden_columns = ['hashed_password', 'salt', 'created_at', 'updated_at'] |
|
19 | end |
|
19 | end |
|
20 |
|
20 | ||
|
21 | def active |
|
21 | def active |
|
22 | sessions = ActiveRecord::SessionStore::Session.find(:all, :conditions => ["updated_at >= ?", 60.minutes.ago]) |
|
22 | sessions = ActiveRecord::SessionStore::Session.find(:all, :conditions => ["updated_at >= ?", 60.minutes.ago]) |
|
23 | @users = [] |
|
23 | @users = [] |
|
24 | sessions.each do |session| |
|
24 | sessions.each do |session| |
|
25 | if session.data[:user_id] |
|
25 | if session.data[:user_id] |
|
26 | @users << User.find(session.data[:user_id]) |
|
26 | @users << User.find(session.data[:user_id]) |
|
27 | end |
|
27 | end |
|
28 | end |
|
28 | end |
|
29 | end |
|
29 | end |
|
30 |
|
30 | ||
|
31 | def show |
|
31 | def show |
|
32 | @user = User.find(params[:id]) |
|
32 | @user = User.find(params[:id]) |
|
33 | end |
|
33 | end |
|
34 |
|
34 | ||
|
35 | def new |
|
35 | def new |
|
36 | @user = User.new |
|
36 | @user = User.new |
|
37 | end |
|
37 | end |
|
38 |
|
38 | ||
|
39 | def create |
|
39 | def create |
|
40 | @user = User.new(params[:user]) |
|
40 | @user = User.new(params[:user]) |
|
|
41 | + @user.member1_full_name = @user.full_name | ||
|
41 | @user.activated = true |
|
42 | @user.activated = true |
|
42 | if @user.save |
|
43 | if @user.save |
|
43 | flash[:notice] = 'User was successfully created.' |
|
44 | flash[:notice] = 'User was successfully created.' |
|
44 | redirect_to :action => 'list' |
|
45 | redirect_to :action => 'list' |
|
45 | else |
|
46 | else |
|
46 | render :action => 'new' |
|
47 | render :action => 'new' |
|
47 | end |
|
48 | end |
|
48 | end |
|
49 | end |
|
49 |
|
50 | ||
|
50 | def create_from_list |
|
51 | def create_from_list |
|
51 | lines = params[:user_list] |
|
52 | lines = params[:user_list] |
|
52 |
|
53 | ||
|
53 | note = [] |
|
54 | note = [] |
|
54 |
|
55 | ||
|
55 | lines.split("\n").each do |line| |
|
56 | lines.split("\n").each do |line| |
|
56 | items = line.chomp.split(',') |
|
57 | items = line.chomp.split(',') |
|
57 | if items.length>=2 |
|
58 | if items.length>=2 |
|
58 | login = items[0] |
|
59 | login = items[0] |
|
59 | full_name = items[1] |
|
60 | full_name = items[1] |
|
60 |
|
61 | ||
|
61 | added_random_password = false |
|
62 | added_random_password = false |
|
62 | if items.length>=3 |
|
63 | if items.length>=3 |
|
63 | password = items[2] |
|
64 | password = items[2] |
|
64 | user_alias = (items.length>=4) ? items[3] : login |
|
65 | user_alias = (items.length>=4) ? items[3] : login |
|
65 | else |
|
66 | else |
|
66 | password = random_password |
|
67 | password = random_password |
|
67 | user_alias = (items.length>=4) ? items[3] : login |
|
68 | user_alias = (items.length>=4) ? items[3] : login |
|
68 | added_random_password = true |
|
69 | added_random_password = true |
|
69 | end |
|
70 | end |
|
70 |
|
71 | ||
|
71 | user = User.new({:login => login, |
|
72 | user = User.new({:login => login, |
|
72 | :full_name => full_name, |
|
73 | :full_name => full_name, |
|
73 | :password => password, |
|
74 | :password => password, |
|
74 | :password_confirmation => password, |
|
75 | :password_confirmation => password, |
|
75 | :alias => user_alias}) |
|
76 | :alias => user_alias}) |
|
76 | user.activated = true |
|
77 | user.activated = true |
|
77 | user.save |
|
78 | user.save |
|
78 |
|
79 | ||
|
79 | if added_random_password |
|
80 | if added_random_password |
|
80 | note << "'#{login}' (+)" |
|
81 | note << "'#{login}' (+)" |
|
81 | else |
|
82 | else |
|
82 | note << login |
|
83 | note << login |
|
83 | end |
|
84 | end |
|
84 | end |
|
85 | end |
|
85 | end |
|
86 | end |
|
86 | flash[:notice] = 'User(s) ' + note.join(', ') + |
|
87 | flash[:notice] = 'User(s) ' + note.join(', ') + |
|
87 | ' were successfully created. ' + |
|
88 | ' were successfully created. ' + |
|
88 | '( (+) - created with random passwords.)' |
|
89 | '( (+) - created with random passwords.)' |
@@ -47,66 +47,66 | |||||
|
47 | # See Rails::Configuration for more options |
|
47 | # See Rails::Configuration for more options |
|
48 |
|
48 | ||
|
49 | # ------------- |
|
49 | # ------------- |
|
50 | # Required gems |
|
50 | # Required gems |
|
51 | # ------------- |
|
51 | # ------------- |
|
52 | config.gem "haml" |
|
52 | config.gem "haml" |
|
53 | config.gem "tmail" |
|
53 | config.gem "tmail" |
|
54 | config.gem "rdiscount", :lib => "rdiscount" |
|
54 | config.gem "rdiscount", :lib => "rdiscount" |
|
55 |
|
55 | ||
|
56 | # NOTES on rspec: if you wan to test with rspec, you have to install |
|
56 | # NOTES on rspec: if you wan to test with rspec, you have to install |
|
57 | # rspec yourself, just call: [sudo] gem install rspec-rails |
|
57 | # rspec yourself, just call: [sudo] gem install rspec-rails |
|
58 |
|
58 | ||
|
59 | end |
|
59 | end |
|
60 |
|
60 | ||
|
61 | # Add new inflection rules using the following format |
|
61 | # Add new inflection rules using the following format |
|
62 | # (all these examples are active by default): |
|
62 | # (all these examples are active by default): |
|
63 | # Inflector.inflections do |inflect| |
|
63 | # Inflector.inflections do |inflect| |
|
64 | # inflect.plural /^(ox)$/i, '\1en' |
|
64 | # inflect.plural /^(ox)$/i, '\1en' |
|
65 | # inflect.singular /^(ox)en/i, '\1' |
|
65 | # inflect.singular /^(ox)en/i, '\1' |
|
66 | # inflect.irregular 'person', 'people' |
|
66 | # inflect.irregular 'person', 'people' |
|
67 | # inflect.uncountable %w( fish sheep ) |
|
67 | # inflect.uncountable %w( fish sheep ) |
|
68 | # end |
|
68 | # end |
|
69 |
|
69 | ||
|
70 | # Add new mime types for use in respond_to blocks: |
|
70 | # Add new mime types for use in respond_to blocks: |
|
71 | # Mime::Type.register "text/richtext", :rtf |
|
71 | # Mime::Type.register "text/richtext", :rtf |
|
72 | # Mime::Type.register "application/x-mobile", :mobile |
|
72 | # Mime::Type.register "application/x-mobile", :mobile |
|
73 |
|
73 | ||
|
74 | # Include your application configuration below |
|
74 | # Include your application configuration below |
|
75 |
|
75 | ||
|
76 | # If you want to manage graders through web interface, set the path to |
|
76 | # If you want to manage graders through web interface, set the path to |
|
77 | # the grader directory below. This dir is where raw, ev, ev-exam, |
|
77 | # the grader directory below. This dir is where raw, ev, ev-exam, |
|
78 | # scripts reside. All grader scripts will be in |
|
78 | # scripts reside. All grader scripts will be in |
|
79 | # #{GRADER_ROOT_DIR}/scripts. |
|
79 | # #{GRADER_ROOT_DIR}/scripts. |
|
80 | GRADER_ROOT_DIR = '' |
|
80 | GRADER_ROOT_DIR = '' |
|
81 |
|
81 | ||
|
82 | # These are where inputs and outputs of test requests are stored |
|
82 | # These are where inputs and outputs of test requests are stored |
|
83 | TEST_REQUEST_INPUT_FILE_DIR = RAILS_ROOT + '/data/test_request/input' |
|
83 | TEST_REQUEST_INPUT_FILE_DIR = RAILS_ROOT + '/data/test_request/input' |
|
84 | TEST_REQUEST_OUTPUT_FILE_DIR = RAILS_ROOT + '/data/test_request/output' |
|
84 | TEST_REQUEST_OUTPUT_FILE_DIR = RAILS_ROOT + '/data/test_request/output' |
|
85 |
|
85 | ||
|
86 | # To use ANALYSIS MODE, provide the testcases/testruns breakdown, |
|
86 | # To use ANALYSIS MODE, provide the testcases/testruns breakdown, |
|
87 | # and the directory of the grading result (usually in judge's dir). |
|
87 | # and the directory of the grading result (usually in judge's dir). |
|
88 | TASK_GRADING_INFO_FILENAME = RAILS_ROOT + '/config/tasks.yml' |
|
88 | TASK_GRADING_INFO_FILENAME = RAILS_ROOT + '/config/tasks.yml' |
|
89 |
|
89 | ||
|
90 | # TODO: change this to where results are kept. |
|
90 | # TODO: change this to where results are kept. |
|
91 | GRADING_RESULT_DIR = 'RESULT-DIR' |
|
91 | GRADING_RESULT_DIR = 'RESULT-DIR' |
|
92 |
|
92 | ||
|
93 | # Change this to allow importing testdata into database as test-pairs. |
|
93 | # Change this to allow importing testdata into database as test-pairs. |
|
94 | # This is mainly for Code Jom contest. |
|
94 | # This is mainly for Code Jom contest. |
|
95 |
- ALLOW_TEST_PAIR_IMPORT = |
|
95 | + ALLOW_TEST_PAIR_IMPORT = true |
|
96 |
|
96 | ||
|
97 | # Uncomment so that the system validates user e-mails |
|
97 | # Uncomment so that the system validates user e-mails |
|
98 | # VALIDATE_USER_EMAILS = true |
|
98 | # VALIDATE_USER_EMAILS = true |
|
99 |
|
99 | ||
|
100 | # Uncomment so that Apache X-Sendfile is used when delivering files |
|
100 | # Uncomment so that Apache X-Sendfile is used when delivering files |
|
101 | # (e.g., in /tasks/view). |
|
101 | # (e.g., in /tasks/view). |
|
102 | # USE_APACHE_XSENDFILE = true |
|
102 | # USE_APACHE_XSENDFILE = true |
|
103 |
|
103 | ||
|
104 | # Uncomment so that configuration is read only once when the server is loaded |
|
104 | # Uncomment so that configuration is read only once when the server is loaded |
|
105 | # Configuration.enable_caching |
|
105 | # Configuration.enable_caching |
|
106 |
|
106 | ||
|
107 | # OPTIONS FOR CODE JOM |
|
107 | # OPTIONS FOR CODE JOM |
|
108 | # -------------------- |
|
108 | # -------------------- |
|
109 | CODEJOM_MAX_ALIVE_LEVEL = 10 |
|
109 | CODEJOM_MAX_ALIVE_LEVEL = 10 |
|
110 | TEST_ASSIGNMENT_EXPIRATION_DURATION = 5.minute |
|
110 | TEST_ASSIGNMENT_EXPIRATION_DURATION = 5.minute |
|
111 | SHOW_CONTEST_STATUS = false |
|
111 | SHOW_CONTEST_STATUS = false |
|
112 | HIDE_PASSED_TASKS = true No newline at end of file |
|
112 | HIDE_PASSED_TASKS = true |
You need to be logged in to leave comments.
Login now