1
77%
master: 81%

Ran 04 Jul 2014 10:30AM UTC

Files 166

Run time 1min

Badge

Embed ▾

Committed 04 Jul 2014 10:15AM UTC coverage: 77.493% (+0.7%) from 76.835%

Job # 892.1

Build Type

push

travis-ci

Committed by

ikame

Commit Message

Check permissions when accessing attachments

Attachment files dispatching is now done through `RawAttachmentView`
view that checks for appropiate permissions.

When using the development server this view just redirects to the real
media path of the file.

When using the production server the special redirection header
`X-Accel-Redirect` is used instead to improve efficiency by instructing
the server to dispatch the file instead of django, but you also need the
following configuration (Nginx):

location /attachment-files {
    internal;
    alias /path/to/taiga/media/attachment-files;
}

It's recommended to also restrict the direct access from outside to the
`attachment-files` directory by using some configuration like this:

location /media/attachment-files {
    deny all;
}

Run Details

3784 of 4883 relevant lines covered (77.49%)

0.77 hits per line

taigaio / taiga-back / 892 / 1
77%
master: 81%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 892.1

taigaio / taiga-back / 892 / 1 77% master: 81%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 892.1

taigaio / taiga-back / 892 / 1
77%
master: 81%

README BADGES
x