294 commits

Author	SHA1	Message	Date
carla	86a3c4e50e	tests: add tests for import	2026-02-02 13:07:00 +01:00
Moritz	f8f6583679	PermissionSetsTest: assert /users/:id instead of /profile in pages ... Profile is reachable at /users/:id; /profile was removed from PermissionSets.	2026-01-30 11:37:34 +01:00
Moritz	cf6bd4a6a1	UserPoliciesTest: use :update for non-admin own-email and forbid-other ... - own_data, read_only, normal_user: can update own email via :update - cannot update other users: use :update (scope :own forbids)	2026-01-30 11:13:34 +01:00
Moritz	faee780aab	Tests: read_only/normal_user /users/:id, Ash.read! actor, Authorization own/other ... - Integration: read_only and normal_user GET /users/:id (own) and edit/show/edit return 200 - Integration: read_only GET /users/:id (other) redirects - Plug test: use group_fixture in setup instead of Ash.read!() without actor - Authorization: tests for own/other profile and reserved 'new'	2026-01-30 10:22:34 +01:00
Moritz	3a7e4000c0	fix: fix warning of unused variable in UserLive.IndexTest	2026-01-30 00:13:40 +01:00
Moritz	28d134b2b0	chore: remove unused aliases in tests ... - Drop unused Member alias from membership and membership_fees test files.	2026-01-30 00:00:33 +01:00
Moritz	b55f356762	fix: handle nil member in MembershipFeeHelpers ... - get_last_completed_cycle/2 and get_current_cycle/2 return nil when member is nil. - Avoids FunctionClauseError when MemberLive.Show receives no member (e.g. after redirect or policy filter). Add unit tests for nil member.	2026-01-30 00:00:32 +01:00
Moritz	ad00e8e7b6	test: add page permission tests and ConnCase role tags ... - ConnCase: add :read_only and :normal_user role tags for tests. - Add CheckPagePermission plug tests (unit + integration for member, read_only, normal_user, admin). Update permission_sets_test (refute "/" for own_data). - Profile navigation, global_settings, role_live, membership_fee_type: use users with role for "/" access; expect redirect for own_data on /settings and /admin/roles.	2026-01-30 00:00:32 +01:00
Moritz	4473cfd372	Tests: use code interface for Member create/update (actor propagation)	2026-01-29 16:10:12 +01:00
Moritz	9a7622ebed	fix: pass actor to CustomFieldLive.FormComponent for save ... IndexComponent now passes actor to FormComponent; FormComponent uses assigns[:actor] instead of current_actor(socket). Add test that submits new custom field form on settings page.	2026-01-29 16:10:12 +01:00
Moritz	1d17c4f2dd	fix: CustomField policies, no system-actor fallback, guidelines ... - Tests and UI pass actor for CustomField create/read/destroy; seeds use actor - Member required-custom-fields validation uses context.actor only (no fallback) - CODE_GUIDELINES: add rule forbidding system-actor fallbacks	2026-01-29 16:10:12 +01:00
Moritz	36b5d5880b	Add CustomField resource policies and tests ... - Add policies block with HasPermission for read/create/update/destroy - Add authorizers: [Ash.Policy.Authorizer] to CustomField resource - Add custom_field_policies_test.exs (read all roles, write admin only) - Fix CustomField path in roles-and-permissions doc (lib/membership)	2026-01-29 16:10:12 +01:00
Simon	9b314a9806	fix: credo error	2026-01-29 15:26:45 +01:00
Simon	b4adf63e83	feix: optimize queries for groups	2026-01-29 15:22:40 +01:00
Simon	124ab295a6	fix: select all checkbox handling	2026-01-29 15:14:36 +01:00
Simon	0a1b52d978	test: fix tests	2026-01-29 14:39:31 +01:00
Simon	0b29fbbd21	test: restore removed tests including optimizations	2026-01-29 12:59:06 +01:00
Simon	3f0dc868c9	chore: disable test performance output again	2026-01-28 14:54:59 +01:00
Simon	c3ad8894b0	refactor: implement more review comments	2026-01-28 14:47:30 +01:00
Simon	ea3bdcaa65	refactor: apply review comments	2026-01-28 14:42:16 +01:00
Simon	050ca4a13c	test: move slow and less critical tests to nightly suite	2026-01-28 14:34:05 +01:00
Simon	91f8bb03bc	refactor: remove tests against basic framework functionalities	2026-01-28 13:46:18 +01:00
Simon	15d328afbf	test: optimize single test and update docs	2026-01-28 13:33:39 +01:00
Simon	6efad280bd	refactor: apply review comments	2026-01-28 12:36:19 +01:00
Simon	67e06e12ce	refactor: move slow performance tests to extra test suite	2026-01-28 12:00:32 +01:00
Simon	fce01ddf83	style: fix formatting	2026-01-28 11:32:46 +01:00
Simon	f9403c1da9	refactor: improve seeds tests performance by reducing complexity	2026-01-28 11:31:31 +01:00
Simon	ddc8335cc0	refactor: improve groups LiveView based on code review feedback	2026-01-28 10:33:27 +01:00
Simon	3eb4cde0b7	Merge remote-tracking branch 'origin/main' into feature/372-groups-management	2026-01-27 23:48:31 +01:00
Simon	9991291b2f	test: adapt tests to reflect implementation details	2026-01-27 23:40:12 +01:00
Simon	6faa9847f4	feat: add groups administration #372	2026-01-27 21:55:17 +01:00
Simon	f05fae3ea3	test: add tdd tests for groups administration #372	2026-01-27 18:24:42 +01:00
Moritz	2b4e1e3963	Sync user email to member when changing password (admin_set_password) ... Add SyncUserEmailToMember change to admin_set_password so email+password updates in the user form sync the new email to the linked member.	2026-01-27 17:58:35 +01:00
Moritz	7d33acde9f	feat(system_actor): add system_user?/1 and normalize email ... Case-insensitive email comparison for system-actor detection.	2026-01-27 17:39:04 +01:00
Moritz	9c31f0c16c	Add tests for system actor protection and hiding ... Index: system actor not in list, destroy returns Ash.Error.Invalid. Show/Form: redirect to /users when viewing or editing system actor user.	2026-01-27 17:39:04 +01:00
simon	5df1da1573	Merge branch 'main' into feature/371-groups-resource	2026-01-27 17:16:34 +01:00
Simon	fc8306cfee	test: resolve warnings	2026-01-27 16:38:17 +01:00
Moritz	0219073d33	CFV policies test: system_actor for setup, verify destroy with actor ... - create_linked_member_for_user and create_unlinked_member use actor (system_actor) directly instead of creating admin user per call - Remove create_admin_user helper - After destroy, verify with Ash.get(..., actor: actor) to avoid false positive from Forbidden vs NotFound	2026-01-27 16:07:01 +01:00
Moritz	4e032ea778	Add CustomFieldValue policy tests (own_data, read_only, normal_user, admin) ... Covers read/update/create/destroy for linked vs unlinked members and CRUD permissions per permission set.	2026-01-27 16:07:01 +01:00
Moritz	17831a0948	Pass actor to CustomFieldValue destroy and load in existing tests ... Required after CustomFieldValue gained authorization policies.	2026-01-27 16:07:01 +01:00
Simon	6db64bf996	feat: add groups resource #371	2026-01-27 16:03:21 +01:00
Simon	0216dfcbbb	test: add tests for group resource #371	2026-01-27 15:04:26 +01:00
Moritz	562265f212	Security: Require actor parameter in CSV import ... Remove fallback to system_actor in process_chunk to prevent unauthorized access. Actor must now be explicitly provided.	2026-01-25 18:33:25 +01:00
carla	79361c72d2	fix tests and linting	2026-01-25 17:31:49 +01:00
carla	0fe4a55e80	formatting and refactoring	2026-01-25 17:31:48 +01:00
carla	bf7e47ce5c	refactor	2026-01-25 17:31:42 +01:00
carla	04b0916c1e	refactor	2026-01-25 17:30:07 +01:00
carla	092fd99d48	fat: adds csv import live view to settings	2026-01-25 17:30:03 +01:00
carla	bf9e47b257	test: adds live view csv import tests	2026-01-25 17:22:28 +01:00
Moritz	2d446f63ea	Add NOT NULL constraint to users.role_id and optimize default_role_id ... - Add database-level NOT NULL constraint for users.role_id - Update SystemActor tests to verify NOT NULL constraint enforcement - Add process dictionary caching for default_role_id/0 to reduce DB queries	2026-01-25 17:04:48 +01:00