378 commits

Author	SHA1	Message	Date
Moritz	81bcd2bc4d	feat(vereinfacht): Settings UI and bulk sync ... - GlobalSettingsLive: Vereinfacht section, sync button, last sync result - Test: Vereinfacht Integration section visible	2026-02-18 22:30:29 +01:00
simon	84f97c12f8	Merge branch 'main' into feature/groups-search-integration	2026-02-18 13:06:26 +01:00
Simon	63b8e70e62	fix: adress review comments	2026-02-18 13:05:31 +01:00
Simon	f6575319f7	feat: add groups to search vector ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-18 12:47:23 +01:00
carla	b18f895939	chore: rename ImportExport module to Import	2026-02-17 18:59:18 +01:00
Simon	911f308a67	fix: address review comments	2026-02-17 15:30:23 +01:00
Simon	b1a9eb8b1d	feat: add groups to member detail view #374	2026-02-17 14:15:43 +01:00
Simon	46f9094e1f	style: fix formatting	2026-02-17 12:16:15 +01:00
Simon	2e4d14dd60	test: add tdd tests for groups in member detail view #374	2026-02-17 12:15:46 +01:00
Simon	6831ba046f	Merge remote-tracking branch 'origin/main' into feature/member-overview-groups	2026-02-16 15:57:57 +01:00
Simon	ace59bbae6	fix: implement review comments	2026-02-16 15:30:16 +01:00
Simon	65581d0639	style: fix formatting	2026-02-13 18:26:14 +01:00
Simon	1133ffb28f	fix: test	2026-02-13 18:18:15 +01:00
Simon	5fd7c0e7f6	feat: improve groups fillter	2026-02-13 17:45:51 +01:00
carla	22458cd52b	Merge branch 'main' into feature/286_export_pdf	2026-02-13 17:40:39 +01:00
carla	baa288bff3	refactor	2026-02-13 17:21:14 +01:00
Simon	3322efcdf6	test: adapt earlier tests to groups implementation	2026-02-13 09:48:09 +01:00
Simon	3b87db6ad1	test: add tdd tests for group integration in member view #373	2026-02-13 09:39:53 +01:00
Simon	dce4b2cf33	feat: add groups to member overview	2026-02-13 09:28:16 +01:00
Moritz	004336fea3	Statistics test: guarantee empty members then assert is_nil for first_join_year	2026-02-12 19:35:48 +01:00
Moritz	bd4dc86cca	StatisticsLiveTest: explicit auth (read_only) and redirect test for own_data	2026-02-12 19:35:48 +01:00
Moritz	3eead112b0	Statistics tests: strict first_join_year nil, fee_type_id in URL	2026-02-12 19:35:48 +01:00
Moritz	490dced8c8	Statistics: member stats independent of fee type	2026-02-12 19:35:48 +01:00
Moritz	0351ad6a51	Fix create_fee_type default arg warning in StatisticsTest	2026-02-12 19:35:48 +01:00
Moritz	6e309622a0	Add StatisticsLive: overview, bars by year, pie chart ... - Summary cards: active/inactive members, open amount - Joins and exits by year (horizontal bars) - Contributions by year: table with stacked bar above amounts - Column order: Paid, Unpaid, Suspended, Total; color dots for legend - All years combined pie chart - LiveView tests	2026-02-12 19:35:48 +01:00
Moritz	919a8e4ebd	Add statistics route, permissions, and sidebar entry ... - /statistics route and PagePaths.statistics - Permission sets: viewer and admin can access /statistics - Sidebar link with can_access_page check - Plug and sidebar tests updated	2026-02-12 19:35:48 +01:00
Moritz	fd10fe5cf6	Add Statistics module for member and cycle aggregates ... - first_join_year, active/inactive counts, joins/exits by year - cycle_totals_by_year, open_amount_total - Unit tests for Statistics	2026-02-12 19:35:48 +01:00
Simon	2f8a6a2768	Merge remote-tracking branch 'origin/main' into feature/ui-for-adding-members-groups	2026-02-12 15:16:35 +01:00
Simon	900f322422	fix: pr comments	2026-02-12 15:08:40 +01:00
carla	f6b35f03a5	feat: adds pdf export with imprintor	2026-02-11 11:47:26 +01:00
carla	e68a7cf8c7	fix linting	2026-02-09 14:08:12 +01:00
carla	9115d53198	tests: add tests	2026-02-09 13:34:57 +01:00
carla	36e57b24be	Merge branch 'main' into feature/export_csv	2026-02-06 08:02:05 +01:00
carla	8e387d8e17	tests: update tests	2026-02-05 15:03:36 +01:00
Moritz	c5f1fdce0a	Code-review follow-ups: policy, docs, seed_admin behaviour ... - Use OidcRoleSyncContext for set_role_from_oidc_sync; document JWT peek risk. - seed_admin without password sets Admin role on existing user (OIDC-only); update docs and test. - Fix DE translation for 'access this page'; add get? true comment in User.	2026-02-04 19:44:43 +01:00
Moritz	d573a22769	Tests: accept single user or list from read_sign_in_with_rauthy (get? true) ... Handle {:ok, user}, {:ok, nil} in addition to {:ok, [user]}, {:ok, []}.	2026-02-04 18:13:30 +01:00
Moritz	99722dee26	Add OidcRoleSync: apply Admin/Mitglied from OIDC groups ... Register and sign-in call apply_admin_role_from_user_info; users in configured admin group get Admin role, others get Mitglied. Internal User action + bypass policy.	2026-02-04 18:13:30 +01:00
Moritz	a6e35da0f7	Add OIDC role sync config (OIDC_ADMIN_GROUP_NAME, OIDC_GROUPS_CLAIM) ... Mv.OidcRoleSyncConfig reads from config; runtime.exs overrides from ENV in prod.	2026-02-04 18:13:30 +01:00
Moritz	e065b39ed4	Add Mv.Release.seed_admin for admin bootstrap from ENV ... Creates/updates admin user from ADMIN_EMAIL and ADMIN_PASSWORD or ADMIN_PASSWORD_FILE. Idempotent; no fallback password in production. Called from docker entrypoint and seeds.	2026-02-04 18:13:30 +01:00
carla	b429a4dbb6	test: adds tests	2026-02-04 16:43:12 +01:00
carla	3415faeb21	Merge branch 'main' into feature/337_polish_import	2026-02-04 16:28:55 +01:00
carla	d34ff57531	refactor	2026-02-04 15:52:00 +01:00
Moritz	5194b20b5c	Fix unlink-by-omission: on_missing :ignore, test, doc, string-key ... - Member update_member: on_missing :unrelate → :ignore (no unlink when :user omitted) - Test: normal_user update linked member without :user keeps link - Doc: unlink only explicit (user: nil), admin-only; Actor.admin?(nil) note - Check: defense-in-depth for "user" string key	2026-02-04 14:07:39 +01:00
Moritz	543fded102	Harden member user-link check: argument presence, nil actor, policy scope ... - Forbid on :user argument presence (not value) to block unlink via nil/empty - Defensive nil actor handling; policy restricted to create/update only - Test: Ash.load with actor; test non-admin cannot unlink via user: nil - Docs: unlink behaviour and policy split	2026-02-04 14:07:39 +01:00
Moritz	34e049ef32	Refactor member user-link tests: shared setup ... Use describe-level setup for normal_user, admin, unlinked_member.	2026-02-04 14:07:39 +01:00
Moritz	26fbafdd9d	Restrict member user link to admins (forbid policy) ... Add ForbidMemberUserLinkUnlessAdmin check; forbid_if on Member create/update. Fix member user-link tests: pass :user in params, assert via reload.	2026-02-04 14:07:38 +01:00
Moritz	4d3a64c177	Add Role resource policies (defense-in-depth) ... - PermissionSets: Role read :all for own_data, read_only, normal_user; admin keeps full CRUD - Role resource: authorizers and policies with HasPermission - Tests: role_policies_test.exs (read all, create/update/destroy admin only) - Fix existing tests to pass actor or authorize?: false for Role operations	2026-02-04 14:07:38 +01:00
Moritz	541c79e501	ARIA: remove aria-sort from sort button; Password column tests ... - Sort button: aria-sort removed (button role does not support it). - Index tests: remove aria-sort assertions; add Password column display tests.	2026-02-04 11:06:55 +01:00
Moritz	7eba21dc9c	Hide Regenerate Cycles button when no membership fee type assigned ... - Button only shown when @member.membership_fee_type is set (same as Create Cycle). - Test: no-type view asserts Regenerate Cycles button is not present.	2026-02-04 09:38:26 +01:00
Moritz	c035d0f141	Docs: groups and roles/permissions architecture, Group moduledoc ... - groups-architecture: normal_user and admin can manage groups. - roles-and-permissions: matrix and MembershipFeeCycle :linked for own_data. - group_policies_test: update moduledoc.	2026-02-04 09:20:26 +01:00