Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: DEV-1400: OWASP security checks #2253

Merged
merged 1 commit into from
Apr 19, 2022
Merged

fix: DEV-1400: OWASP security checks #2253

merged 1 commit into from
Apr 19, 2022

Conversation

makseq
Copy link
Member

@makseq makseq commented Apr 19, 2022

No description provided.

@codecov
Copy link

codecov bot commented Apr 19, 2022

Codecov Report

Merging #2253 (d183570) into develop (dd10bfe) will decrease coverage by 0.00%.
The diff coverage is n/a.

@@             Coverage Diff             @@
##           develop    #2253      +/-   ##
===========================================
- Coverage    77.80%   77.79%   -0.01%     
===========================================
  Files          137      137              
  Lines         9970     9975       +5     
===========================================
+ Hits          7757     7760       +3     
- Misses        2213     2215       +2     
Impacted Files Coverage Δ
label_studio/label_studio/users/forms.py 87.09% <0.00%> (-2.38%) ⬇️

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update dd10bfe...d183570. Read the comment docs.

@farioas farioas merged commit ed0cc5f into develop Apr 19, 2022
@farioas farioas deleted the fb-dev-1400 branch April 19, 2022 12:15
makseq added a commit that referenced this pull request May 11, 2022
…/id/tasks if page is out of scope (#2321) (#2322)

* fix: DEV-2024: Add control weight description with example (#2168)

* fix: DEV-2024: Add control weight description with example

* Fix control weights description

* feat: DEV-2007: DEV-2008: Add functional of dynamic children (#2169)

* feat: DEV-2007: DEV-2008: Add functional of dynamic children [lsf]

It affects Choices, Taxonomy and all types of Labels

* feat: DEV-2007: DEV-2008: Make server validation work with dynamic choices

* fix: DEV-2007: DEV-2008: Fix working with empty list of dynamic children [lsf]

* Update builds [lsf]

lsf:
- feat: DEV-2007: Make choices be able to be nested

* Update builds [lsf]

lsf:
- feat: DEV-2007: Add allowNested attribute

* Update builds [lsf]

* Update validation.py

* update frontend later, only backend fixes now

Co-authored-by: Max Tkachenko <makseq@gmail.com>
Co-authored-by: hlomzik <hlomzik@gmail.com>

* fix: DEV-1970: DEV-2055: DEV-2007: DEV-1324: LSF (#2198)

Add fixes from LSF:
DEV-1970: whenLabelValue in required TextArea
DEV-2055: fix shifted offsets in HyperText
DEV-2007: add functional of dynamic children
DEV-1324: fix undo/redo for Audio

* fix: DEV-2082: Add support "All Tasks" export option (#2193)

* April fools opossum blog  (#2123)

* Opossums blog

I wrote a blog about opossums

* Update opossums.md

* docs: update title of opossum blog post file

* docs: update reference to opossums blog file

* docs: Update date to april fools day

* docs: Add another reason why opossums are like data labeling

* fix: DEV-2082: Add support "All Tasks" export option

* Update requirements.txt

* Update requirements.txt

Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Max Tkachenko <makseq@gmail.com>

* chore: Move heroku+persistent pg to a separate branch (#2199)

* chore: Cloudrun buildkit (#2200)

* feat: DEV-2039: Timestamp tooltip on timeline (#2188)

* April fools opossum blog  (#2123)

* Opossums blog

I wrote a blog about opossums

* Update opossums.md

* docs: update title of opossum blog post file

* docs: update reference to opossums blog file

* docs: Update date to april fools day

* docs: Add another reason why opossums are like data labeling

* overlay timeline on top of waveform for full height timestamp tooltip

* Update LSF

* Update LSF

Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>

* Fix exception on logging (#2177)

Co-authored-by: nik <nik@heartex.net>

* feat: DEV-2040: Add default y-scale parameter (#2202)

* Update LSF

* Update LSF

* bump django_rq version (#2201)

* Fix view-all for Audio and Video (#2187)

* Update README.md

* Update requirements with redis

* fix: DEV-1820: Fix view all for the new audio UI (#2214)

* Fix view all for the new Audio UI

* Update LSF

* docs: Update documentation for redis/postgresql ssl usage (#2213)

* build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#2224)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.1.0 to 3.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](codecov/codecov-action@v2.1.0...v3.0.0)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: Skip chromium installation (#2226)

* pull in chromium via chromium-browser package in dockerfile rather than letting puppeteer pull it in, fixes m1 mac

* ci: Skip chromium installation entirely

Co-authored-by: Kevin Quiring <>
Co-authored-by: Nikita Belonogov <waksaone@gmail.com>

* feat: DEV-2135: Flex fields for project api (#2228)

* fix: Video improvements (#2107)

* Update LSF to the lastest version

* Add the Outliner

* Fix the Outliner in narrow space

* Update config.yml

* Update LSF

* Update LSF

* Update LSF

* Update LSF

* Update LSF

* fix: DEV-1933: Invalid color crash

* Update LSF to the latest version

* Update LSF

* fix: DEV-1885: Fix speed range control

* Update LSF

* Update LSF to the latest version

* Update LSF

* Update LSF

* Update LSF

* Update LSF

Co-authored-by: Max Tkachenko <makseq@gmail.com>

* feat: DEV-2070: Relative task IDs within projects (#2209)

* feat: DEV-2070: Relative task IDs within projects

* Add migrations

* Add inner id calculation in BulkSerializer and save model

* Update serializers.py

* Remove on the fly

* Add feature flag

* Fix misspell

* Update models.py

* Create 0015_task_fill_inner_id.py

* Create 0006_remove_inner_id.py

* Add feature flag

* Update models.py

* Update test_api.py

* Remove feature flags from migrations

* Switch to organization.created_by in ff

* Fix comments

* Revert

* Add support for sqlite

* Fix inner id

* Fixes for s3

Co-authored-by: Konstantin Korotaev <42615530+KonstantinKorotaev@users.noreply.github.com>

* Fix locust tests

* fix: Remove incorrect feature flag usage

* fix: DEV-2014: QuickView performance (#2234)

* Fix DM init, update DM

* Update DM

* Fix tasks selection (#2235)

* test: DEV-2131: Add test for dynamic polygonlabels  (#2227)

* fix: DEV-2131: Add options for PolygonLabels data

* Add test for dynamic labels

Co-authored-by: Max Tkachenko <makseq@gmail.com>

* fix: DEV-2068: Toolswitch finish drawing

Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>

* fix: Remove annotation FieldTracker (#2240)

* fix: DEV-1996: EmptyPage contains no result shouldn't return 500 error (#2194)

* April fools opossum blog  (#2123)

* Opossums blog

I wrote a blog about opossums

* Update opossums.md

* docs: update title of opossum blog post file

* docs: update reference to opossums blog file

* docs: Update date to april fools day

* docs: Add another reason why opossums are like data labeling

* add darwin skipped tests tavern +ignore vim swap +readme test suite add

* fixed tavern test mac osx +windows

* docs +sqlite run

* fix test mac osx

* skip postgrtes test on mac osx

* hide tavern output file

* Handle empty pagination

* update pagination doc swagger expected result

* Add test

* Updated test +reinstated code fix

* Fix failing test;loosen content length

* Fix failing test;anyint

* revist test

* skip tavern win;+enable win local stor tavrn

* rm windows localstore

* leave failing postgres test in my env

Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: makseq-ubnt <makseq@gmail.com>

* fix: DEV-2157: Add indexes for next_task (#2243)

* only load expected python files (#2247)

* ci: DEV-932: Add pypi upload workflow (#2252)

* fix: DEV-1400: OWASP security checks (#2253)

* fix: DEV-2102: Fix data validation for Taxonomy (#2238)

* fix: DEV-2173: Dynamic labels with value="options" as list don't pass backend validation (#2249)

* fix: DEV-2173: Dynamic labels with value="options" as list don't pass backend validation

* Add tests

Co-authored-by: Max Tkachenko <makseq@gmail.com>

* fix: Upload URLs with sub-path (#2254)

* fix: Remove organizaiton with saml (#2258)

* Update builds [lsf] (#2232)

lsf:
- fix: DEV-2096: DEV-2097: Fix basic functional of dynamic children (hotkeys, selected, etc.)

* fix: DEV-2100: Fix duplicating annotation with preselected choices (#2237)

* feat: DEV-2128: Allow to use html inside label-tags (#2242)

* fix: DEV-2072: Export for large projects leads to OOM and works very slowly (#2250)

* fix: DEV-2072: Export for large projects leads to OOM and works very slowly

* Fix mixins get_export_data

* fix: DEV-2072: Stream json encoding

* Fixes in export_to_file

* Change all to exists

Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>
Co-authored-by: makseq-ubnt <makseq@gmail.com>

* feat: DEV-2010: Add ability to see and copy id on userpic on organization page (#2271)

* feat: DEV-2010: Add ability to see and copy id on userpic on organization page

* Add build

Co-authored-by: makseq-ubnt <makseq@gmail.com>

* fix: DEV-1556: Drafts left untouched after update of other user's annotation (#2185)

* fix: DEV-1556: Drafts left untouched after update of other user's annotation

* Add test (DEV-1556)

Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>

* fix: DEV-2243: Fix creating labels config using just the dynamic data (#2277)

* fix: DEV-2217: Fix Dynamic Labels validation warning in Labeling Interface preview (#2272)

* fix: DEV-2226: Fix dynamic labels config preview (#2275)

* fix: DEV-2226: Add example data for labels

* fix: DEV-2226: Fix dynamic labels validation

* fix: DEV-2226: Prevent erasing value by empty text-node child [lsf]

* fix: DEV-2100: DEV-2226: choices fixes

* Fix Andrew

Co-authored-by: hlomzik <hlomzik@gmail.com>
Co-authored-by: Max Tkachenko <makseq@gmail.com>

* fix: DEV-2248: Fix export to file SerializableGenerator (#2279)

* fix: DEV-2248: Fix export to file SerializableGenerator

* fix: DEV-2248: Fix export to file SerializableGenerator

Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>

* fix: DEV-2249: Fix validation in Labeling Interface preview with Dynamic Labels (#2282)

* fix: DEV-2258, DEV-2260: Don't take into account GTs (#2284)

* Return 404 for api/project/id/tasks if page is out of scope (#2321)

* Return 404 for api/project/id/tasks if page is out of scope

* Back

* Fix tests

Co-authored-by: Konstantin Korotaev <42615530+KonstantinKorotaev@users.noreply.github.com>
Co-authored-by: Sergey <Gondragos@gmail.com>
Co-authored-by: hlomzik <hlomzik@gmail.com>
Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Sergey Zhuk <sergey.zhuk@heartex.com>
Co-authored-by: Travis Clark <travisjosephclark@gmail.com>
Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>
Co-authored-by: niklub <lubimov.nicolas@gmail.com>
Co-authored-by: nik <nik@heartex.net>
Co-authored-by: Nick Skriabin <767890+nicholasrq@users.noreply.github.com>
Co-authored-by: Ivan Savin <acccko@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: KevinQuiring <103214883+KevinQuiring@users.noreply.github.com>
Co-authored-by: Nikita Belonogov <waksaone@gmail.com>
Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>
Co-authored-by: David Wright <191410+dvwright@users.noreply.github.com>
Co-authored-by: Nikita Belonogov <nikita.belonogov@heartex.com>
triklozoid added a commit that referenced this pull request May 12, 2022
* fix: DEV-1954: Cache counters for tasks with pages

* Fix counters calculation

* Add total counters to task

* Add counters in tasks

* Add counters recalculation to predictions to annotations action

* Remove cache from DM api

* Fix typos and tests

* Fix saving task in signal

* Fix test_ordering_filters

* Fix api_tasks.tavern

* Add update_tasks_counters on import

* Fix counters recalculation

* Refactor field name to cancelled_annotations

* Create 0015_manual_migrate_counters.py

* improve no more tasks screen (#2172)

Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>

* Add counter for storages import

* Update base_models.py

* Fix migration performance

* Fix update_tasks_counters to use annotate

* Fix model description

* Clean imports

* Fix signals

* Fix conditions for DM load

* Fix update_project_summary_annotations_and_is_labeled

* Rollback counters calculation

* Fix update_tasks_counters for list of tasks

* Fix counter for parallel annotations creation

* Add test with page

* docs: Add read only and hidden descriptions (#2280)

* docs: Little fixes in import docs (#2290)

* fix: Misspell in ML docs (#2298)

* fix: DEV-2354: Fix skip queue (#2342) (#2343)

* Merge Develop + LSE hotfix/2.2.7-hotfix.1: Return 404 for api/project/id/tasks if page is out of scope (#2321) (#2322)

* fix: DEV-2024: Add control weight description with example (#2168)

* fix: DEV-2024: Add control weight description with example

* Fix control weights description

* feat: DEV-2007: DEV-2008: Add functional of dynamic children (#2169)

* feat: DEV-2007: DEV-2008: Add functional of dynamic children [lsf]

It affects Choices, Taxonomy and all types of Labels

* feat: DEV-2007: DEV-2008: Make server validation work with dynamic choices

* fix: DEV-2007: DEV-2008: Fix working with empty list of dynamic children [lsf]

* Update builds [lsf]

lsf:
- feat: DEV-2007: Make choices be able to be nested

* Update builds [lsf]

lsf:
- feat: DEV-2007: Add allowNested attribute

* Update builds [lsf]

* Update validation.py

* update frontend later, only backend fixes now

Co-authored-by: Max Tkachenko <makseq@gmail.com>
Co-authored-by: hlomzik <hlomzik@gmail.com>

* fix: DEV-1970: DEV-2055: DEV-2007: DEV-1324: LSF (#2198)

Add fixes from LSF:
DEV-1970: whenLabelValue in required TextArea
DEV-2055: fix shifted offsets in HyperText
DEV-2007: add functional of dynamic children
DEV-1324: fix undo/redo for Audio

* fix: DEV-2082: Add support "All Tasks" export option (#2193)

* April fools opossum blog  (#2123)

* Opossums blog

I wrote a blog about opossums

* Update opossums.md

* docs: update title of opossum blog post file

* docs: update reference to opossums blog file

* docs: Update date to april fools day

* docs: Add another reason why opossums are like data labeling

* fix: DEV-2082: Add support "All Tasks" export option

* Update requirements.txt

* Update requirements.txt

Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Max Tkachenko <makseq@gmail.com>

* chore: Move heroku+persistent pg to a separate branch (#2199)

* chore: Cloudrun buildkit (#2200)

* feat: DEV-2039: Timestamp tooltip on timeline (#2188)

* April fools opossum blog  (#2123)

* Opossums blog

I wrote a blog about opossums

* Update opossums.md

* docs: update title of opossum blog post file

* docs: update reference to opossums blog file

* docs: Update date to april fools day

* docs: Add another reason why opossums are like data labeling

* overlay timeline on top of waveform for full height timestamp tooltip

* Update LSF

* Update LSF

Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>

* Fix exception on logging (#2177)

Co-authored-by: nik <nik@heartex.net>

* feat: DEV-2040: Add default y-scale parameter (#2202)

* Update LSF

* Update LSF

* bump django_rq version (#2201)

* Fix view-all for Audio and Video (#2187)

* Update README.md

* Update requirements with redis

* fix: DEV-1820: Fix view all for the new audio UI (#2214)

* Fix view all for the new Audio UI

* Update LSF

* docs: Update documentation for redis/postgresql ssl usage (#2213)

* build(deps): bump codecov/codecov-action from 2.1.0 to 3.0.0 (#2224)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2.1.0 to 3.0.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](codecov/codecov-action@v2.1.0...v3.0.0)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* ci: Skip chromium installation (#2226)

* pull in chromium via chromium-browser package in dockerfile rather than letting puppeteer pull it in, fixes m1 mac

* ci: Skip chromium installation entirely

Co-authored-by: Kevin Quiring <>
Co-authored-by: Nikita Belonogov <waksaone@gmail.com>

* feat: DEV-2135: Flex fields for project api (#2228)

* fix: Video improvements (#2107)

* Update LSF to the lastest version

* Add the Outliner

* Fix the Outliner in narrow space

* Update config.yml

* Update LSF

* Update LSF

* Update LSF

* Update LSF

* Update LSF

* fix: DEV-1933: Invalid color crash

* Update LSF to the latest version

* Update LSF

* fix: DEV-1885: Fix speed range control

* Update LSF

* Update LSF to the latest version

* Update LSF

* Update LSF

* Update LSF

* Update LSF

Co-authored-by: Max Tkachenko <makseq@gmail.com>

* feat: DEV-2070: Relative task IDs within projects (#2209)

* feat: DEV-2070: Relative task IDs within projects

* Add migrations

* Add inner id calculation in BulkSerializer and save model

* Update serializers.py

* Remove on the fly

* Add feature flag

* Fix misspell

* Update models.py

* Create 0015_task_fill_inner_id.py

* Create 0006_remove_inner_id.py

* Add feature flag

* Update models.py

* Update test_api.py

* Remove feature flags from migrations

* Switch to organization.created_by in ff

* Fix comments

* Revert

* Add support for sqlite

* Fix inner id

* Fixes for s3

Co-authored-by: Konstantin Korotaev <42615530+KonstantinKorotaev@users.noreply.github.com>

* Fix locust tests

* fix: Remove incorrect feature flag usage

* fix: DEV-2014: QuickView performance (#2234)

* Fix DM init, update DM

* Update DM

* Fix tasks selection (#2235)

* test: DEV-2131: Add test for dynamic polygonlabels  (#2227)

* fix: DEV-2131: Add options for PolygonLabels data

* Add test for dynamic labels

Co-authored-by: Max Tkachenko <makseq@gmail.com>

* fix: DEV-2068: Toolswitch finish drawing

Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>

* fix: Remove annotation FieldTracker (#2240)

* fix: DEV-1996: EmptyPage contains no result shouldn't return 500 error (#2194)

* April fools opossum blog  (#2123)

* Opossums blog

I wrote a blog about opossums

* Update opossums.md

* docs: update title of opossum blog post file

* docs: update reference to opossums blog file

* docs: Update date to april fools day

* docs: Add another reason why opossums are like data labeling

* add darwin skipped tests tavern +ignore vim swap +readme test suite add

* fixed tavern test mac osx +windows

* docs +sqlite run

* fix test mac osx

* skip postgrtes test on mac osx

* hide tavern output file

* Handle empty pagination

* update pagination doc swagger expected result

* Add test

* Updated test +reinstated code fix

* Fix failing test;loosen content length

* Fix failing test;anyint

* revist test

* skip tavern win;+enable win local stor tavrn

* rm windows localstore

* leave failing postgres test in my env

Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: makseq-ubnt <makseq@gmail.com>

* fix: DEV-2157: Add indexes for next_task (#2243)

* only load expected python files (#2247)

* ci: DEV-932: Add pypi upload workflow (#2252)

* fix: DEV-1400: OWASP security checks (#2253)

* fix: DEV-2102: Fix data validation for Taxonomy (#2238)

* fix: DEV-2173: Dynamic labels with value="options" as list don't pass backend validation (#2249)

* fix: DEV-2173: Dynamic labels with value="options" as list don't pass backend validation

* Add tests

Co-authored-by: Max Tkachenko <makseq@gmail.com>

* fix: Upload URLs with sub-path (#2254)

* fix: Remove organizaiton with saml (#2258)

* Update builds [lsf] (#2232)

lsf:
- fix: DEV-2096: DEV-2097: Fix basic functional of dynamic children (hotkeys, selected, etc.)

* fix: DEV-2100: Fix duplicating annotation with preselected choices (#2237)

* feat: DEV-2128: Allow to use html inside label-tags (#2242)

* fix: DEV-2072: Export for large projects leads to OOM and works very slowly (#2250)

* fix: DEV-2072: Export for large projects leads to OOM and works very slowly

* Fix mixins get_export_data

* fix: DEV-2072: Stream json encoding

* Fixes in export_to_file

* Change all to exists

Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>
Co-authored-by: makseq-ubnt <makseq@gmail.com>

* feat: DEV-2010: Add ability to see and copy id on userpic on organization page (#2271)

* feat: DEV-2010: Add ability to see and copy id on userpic on organization page

* Add build

Co-authored-by: makseq-ubnt <makseq@gmail.com>

* fix: DEV-1556: Drafts left untouched after update of other user's annotation (#2185)

* fix: DEV-1556: Drafts left untouched after update of other user's annotation

* Add test (DEV-1556)

Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>

* fix: DEV-2243: Fix creating labels config using just the dynamic data (#2277)

* fix: DEV-2217: Fix Dynamic Labels validation warning in Labeling Interface preview (#2272)

* fix: DEV-2226: Fix dynamic labels config preview (#2275)

* fix: DEV-2226: Add example data for labels

* fix: DEV-2226: Fix dynamic labels validation

* fix: DEV-2226: Prevent erasing value by empty text-node child [lsf]

* fix: DEV-2100: DEV-2226: choices fixes

* Fix Andrew

Co-authored-by: hlomzik <hlomzik@gmail.com>
Co-authored-by: Max Tkachenko <makseq@gmail.com>

* fix: DEV-2248: Fix export to file SerializableGenerator (#2279)

* fix: DEV-2248: Fix export to file SerializableGenerator

* fix: DEV-2248: Fix export to file SerializableGenerator

Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>

* fix: DEV-2249: Fix validation in Labeling Interface preview with Dynamic Labels (#2282)

* fix: DEV-2258, DEV-2260: Don't take into account GTs (#2284)

* Return 404 for api/project/id/tasks if page is out of scope (#2321)

* Return 404 for api/project/id/tasks if page is out of scope

* Back

* Fix tests

Co-authored-by: Konstantin Korotaev <42615530+KonstantinKorotaev@users.noreply.github.com>
Co-authored-by: Sergey <Gondragos@gmail.com>
Co-authored-by: hlomzik <hlomzik@gmail.com>
Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Sergey Zhuk <sergey.zhuk@heartex.com>
Co-authored-by: Travis Clark <travisjosephclark@gmail.com>
Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>
Co-authored-by: niklub <lubimov.nicolas@gmail.com>
Co-authored-by: nik <nik@heartex.net>
Co-authored-by: Nick Skriabin <767890+nicholasrq@users.noreply.github.com>
Co-authored-by: Ivan Savin <acccko@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: KevinQuiring <103214883+KevinQuiring@users.noreply.github.com>
Co-authored-by: Nikita Belonogov <waksaone@gmail.com>
Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>
Co-authored-by: David Wright <191410+dvwright@users.noreply.github.com>
Co-authored-by: Nikita Belonogov <nikita.belonogov@heartex.com>

* Update 0017_manual_migrate_counters.py

* Update migrations

* Fix tests (DEV-1954)

Co-authored-by: Travis Clark <travisjosephclark@gmail.com>
Co-authored-by: Travis Clark <“travisjosephclark@gmail.com”>
Co-authored-by: Max Tkachenko <makseq@gmail.com>
Co-authored-by: Sergei Ivashchenko <triklozoid@gmail.com>
Co-authored-by: Sergey <Gondragos@gmail.com>
Co-authored-by: hlomzik <hlomzik@gmail.com>
Co-authored-by: smoreface <smoreface@users.noreply.github.com>
Co-authored-by: Sergey Zhuk <sergey.zhuk@heartex.com>
Co-authored-by: Nick Skriabin <nr@fenelon.ru>
Co-authored-by: niklub <lubimov.nicolas@gmail.com>
Co-authored-by: nik <nik@heartex.net>
Co-authored-by: Nick Skriabin <767890+nicholasrq@users.noreply.github.com>
Co-authored-by: Ivan Savin <acccko@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: KevinQuiring <103214883+KevinQuiring@users.noreply.github.com>
Co-authored-by: Nikita Belonogov <waksaone@gmail.com>
Co-authored-by: David Wright <191410+dvwright@users.noreply.github.com>
Co-authored-by: Nikita Belonogov <nikita.belonogov@heartex.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants