local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 54 Pull requests 1 Projects 1 Releases 3 Packages 1 Activity Actions

Commit graph

  • 99722dee26 Add OidcRoleSync: apply Admin/Mitglied from OIDC groups Moritz 2026-02-04 16:18:18 +01:00
  • a6e35da0f7 Add OIDC role sync config (OIDC_ADMIN_GROUP_NAME, OIDC_GROUPS_CLAIM) Moritz 2026-02-04 16:15:47 +01:00
  • 50c8a0dc9a Seeds: call Mv.Release.seed_admin to avoid duplication Moritz 2026-02-04 16:13:13 +01:00
  • e065b39ed4 Add Mv.Release.seed_admin for admin bootstrap from ENV Moritz 2026-02-04 16:10:45 +01:00
  • b177e41882 Add Role.get_admin_role for Release.seed_admin Moritz 2026-02-04 16:08:15 +01:00
  • 09a4b7c937 Seeds: use ADMIN_PASSWORD/ADMIN_PASSWORD_FILE; fallback only in dev/test Moritz 2026-02-04 15:17:49 +01:00
  • 7a56a0920b Call seed_admin in docker entrypoint after migrate Moritz 2026-02-04 15:17:45 +01:00
  • e7d63b9b0a fix linting carla 2026-02-04 16:55:24 +01:00
  • 59d94cf1c6 Merge pull request 'Polishs import UI closes #337' (#398) from feature/337_polish_import into main carla 2026-02-04 16:50:43 +01:00
  • b429a4dbb6 test: adds tests carla 2026-02-04 16:43:12 +01:00
  • c82f4b7fd7 feat: add csv export carla 2026-02-04 16:40:41 +01:00
  • 361331b76e fix linting errors carla 2026-02-04 16:36:13 +01:00
  • 3415faeb21 Merge branch 'main' into feature/337_polish_import carla 2026-02-04 16:28:55 +01:00
  • d34ff57531 refactor carla 2026-02-04 15:52:00 +01:00
  • 82b3182267 Merge pull request 'Permission system hardening: Role policies and member user-link restriction closes #406' (#407) from feature/406_permission_hardening into main moritz 2026-02-04 14:52:49 +01:00
  • 95472424b1
         Fix member unlink: use User update_user action Moritz 2026-02-04 14:44:39 +01:00
  • 5194b20b5c
         Fix unlink-by-omission: on_missing :ignore, test, doc, string-key Moritz 2026-02-04 14:06:36 +01:00
  • 543fded102
         Harden member user-link check: argument presence, nil actor, policy scope Moritz 2026-02-04 13:46:49 +01:00
  • 34e049ef32
         Refactor member user-link tests: shared setup Moritz 2026-02-04 13:24:14 +01:00
  • 54e419ed4c
         Docs: permission hardening Role and member user link Moritz 2026-02-04 12:54:15 +01:00
  • 26fbafdd9d
         Restrict member user link to admins (forbid policy) Moritz 2026-02-04 12:50:10 +01:00
  • 4d3a64c177
         Add Role resource policies (defense-in-depth) Moritz 2026-02-04 12:37:48 +01:00
  • 10f37a1246 Merge pull request 'Update Mix dependencies' (#392) from renovate/mix-dependencies into main moritz 2026-02-04 14:06:30 +01:00
  • 40e75f4066 refactor: reduce nesting in HasPermission.strict_check_with_permissions Moritz 2026-02-04 13:29:41 +01:00
  • f7ba98c36b
         refactor: reduce nesting in SyncUserEmailToMember.sync_email Moritz 2026-02-04 13:02:56 +01:00
  • 6aadf4f93b Update Mix dependencies Renovate Bot 2026-02-04 00:11:52 +00:00
  • d13fbef890 Merge pull request 'Complete Permissions for Groups, Membership Fees, and User Role Assignment closes #404' (#405) from feature/404_permission_completeness into main moritz 2026-02-04 11:47:17 +01:00
  • 083592489f ARIA: set aria-sort on th for sortable columns Moritz 2026-02-04 11:40:23 +01:00
  • 24d130ffb5 OIDC: use UserHelpers.has_oidc? in index and show Moritz 2026-02-04 11:40:21 +01:00
  • 503401f2e6 Setting: remove unused actor in default_fee_type validation Moritz 2026-02-04 11:40:19 +01:00
  • d7c6d20483 User form: red warning for OIDC users when setting/changing password Moritz 2026-02-04 11:07:01 +01:00
  • b6d1a27bc9 Seeds: only admin gets password; additional users without password Moritz 2026-02-04 11:06:59 +01:00
  • 541c79e501 ARIA: remove aria-sort from sort button; Password column tests Moritz 2026-02-04 11:06:55 +01:00
  • c6082f2831 Users list and show: Role, Password, OIDC columns; UserHelpers Moritz 2026-02-04 11:06:52 +01:00
  • 7eba21dc9c Hide Regenerate Cycles button when no membership fee type assigned Moritz 2026-02-04 09:38:26 +01:00
  • c035d0f141 Docs: groups and roles/permissions architecture, Group moduledoc Moritz 2026-02-04 09:20:26 +01:00
  • 178f5a01c7 MembershipFeeCycle: own_data read :linked via bypass and HasPermission scope Moritz 2026-02-04 09:20:10 +01:00
  • 890a4d3752 MemberGroup: restrict bypass to own_data via MemberGroupReadLinkedForOwnData Moritz 2026-02-04 09:19:57 +01:00
  • 67ce514ba0 User: fix last-admin validation and forbid non-admin role_id change Moritz 2026-02-04 09:19:47 +01:00
  • dbd0a57292 Secure regenerate_cycles: require can?(:create, MembershipFeeCycle) in handler Moritz 2026-02-04 09:19:37 +01:00
  • 03d3a7eb1b Docs and tests: fix CODE_GUIDELINES structure, use Mv.Fixtures in show_membership_fees_test Moritz 2026-02-04 01:02:22 +01:00
  • a2e1054c8d Tests: use Mv.Fixtures, fix warnings, Credo TODO disable Moritz 2026-02-04 00:34:12 +01:00
  • 3a92398d54 user_policies_test: data-driven tests for own_data, read_only, normal_user Moritz 2026-02-04 00:34:02 +01:00
  • 085b6be769 show_membership_fees_test: format long assert line Moritz 2026-02-04 00:34:01 +01:00
  • 182d34fe58 MemberLive: confirm_delete_all_cycles via Ash.destroy, reduce current_actor Moritz 2026-02-04 00:34:00 +01:00
  • e799f0271c Refactor PermissionSets: define admin permissions via perm_all() Moritz 2026-02-04 00:33:58 +01:00
  • c4459ebb92 Docs, gettext, and remaining test updates Moritz 2026-02-03 23:52:31 +01:00
  • 101fd39f18 Fee settings and fee type form: pass actor for MembershipFeeType read Moritz 2026-02-03 23:52:27 +01:00
  • e3bea17827 Member show & MembershipFees: permissions, delete all, regenerate, errors Moritz 2026-02-03 23:52:24 +01:00
  • 8ec4a07103 User form: persist role, member linking, Forbidden handling Moritz 2026-02-03 23:52:20 +01:00
  • 5ed41555e9 Member/Setting/validations: domain, actor, and seeds Moritz 2026-02-03 23:52:16 +01:00
  • 5889683854 Add resource policies for Group, MemberGroup, MembershipFeeType, MembershipFeeCycle Moritz 2026-02-03 23:52:12 +01:00
  • 893f9453bd Add PermissionSets for Group, MemberGroup, MembershipFeeType, MembershipFeeCycle Moritz 2026-02-03 23:52:09 +01:00
  • 36b7031dca Merge pull request 'chore(deps): update renovate/renovate docker tag to v42.95' (#393) from renovate/renovate-renovate-42.x into main moritz 2026-02-03 19:52:08 +01:00
  • fa5afba6ba chore(deps): update renovate/renovate docker tag to v42.95 Renovate Bot 2026-02-02 00:10:14 +00:00
  • 0c313824fb Merge pull request 'chore(deps): update ghcr.io/sebadob/rauthy docker tag to v0.34.2' (#391) from renovate/ghcr.io-sebadob-rauthy-0.x into main moritz 2026-02-03 19:51:09 +01:00
  • f45ae66f18 chore(deps): update ghcr.io/sebadob/rauthy docker tag to v0.34.2 Renovate Bot 2026-02-01 00:07:43 +00:00
  • c2bafe4acf Merge pull request 'Apply UI Authorization to Existing LiveViews closes #400' (#403) from feature/400_ui_authorization into main moritz 2026-02-03 17:30:15 +01:00
  • cbc9376b7b Tests: data-testid selectors, scoped delete, sidebar testid Moritz 2026-02-03 17:16:15 +01:00
  • ee6bfbacbb User LiveViews: row_id and data-testid for actions Moritz 2026-02-03 17:16:13 +01:00
  • a4b13cef49 Member LiveViews: row_id and data-testid for actions Moritz 2026-02-03 17:16:11 +01:00
  • 286972964d CoreComponents: allow data-testid on button Moritz 2026-02-03 17:16:10 +01:00
  • c36812bf3f Authorization: document can_access_page? nil-safety Moritz 2026-02-03 17:16:09 +01:00
  • 2ddd22078d Sidebar: use PagePaths, add testid for Administration Moritz 2026-02-03 17:16:08 +01:00
  • 9e8910344e Add MvWeb.PagePaths for central sidebar/page paths Moritz 2026-02-03 17:16:07 +01:00
  • 1426ef1d38
         Add sidebar authorization tests Moritz 2026-02-03 16:35:36 +01:00
  • f779fd61e0
         Gate sidebar menu items by can_access_page? Moritz 2026-02-03 16:35:35 +01:00
  • cc9e530d80
         Add User LiveView authorization tests Moritz 2026-02-03 16:35:33 +01:00
  • 2f67c7099d
         Apply UI authorization to User LiveViews (Index and Show) Moritz 2026-02-03 16:35:32 +01:00
  • 5e361ba400
         Add Member LiveView authorization tests Moritz 2026-02-03 16:35:30 +01:00
  • 505e31653a
         Apply UI authorization to Member LiveViews (Index and Show) Moritz 2026-02-03 16:35:29 +01:00
  • d3ad7c5013 Merge pull request 'Member Email Validation for Linked Members closes #397' (#399) from feature/397_emailsync_permission into main moritz 2026-02-03 16:35:40 +01:00
  • e4671e816b
         fix: failing test due to merge Simon 2026-02-03 16:30:59 +01:00
  • 03f27a5938
         Merge remote-tracking branch 'origin/main' into feature/ui-for-adding-members-groups Simon 2026-02-03 16:15:53 +01:00
  • 131904f172
         Test: assert on error field :email instead of message string Moritz 2026-02-03 15:00:27 +01:00
  • 47b6a16177
         Doc: Actor maybe_load_role comment; ActorIsAdmin system user = admin Moritz 2026-02-03 15:00:24 +01:00
  • 60a4181255
         Validation: error message admin or linked user; resolve_actor fallback Moritz 2026-02-03 15:00:20 +01:00
  • 4e6b7305b6
         Doc: Loader auth-independent for link checks; email-sync rule rationale Moritz 2026-02-03 15:00:14 +01:00
  • e0f0ca369c i18n: updates translations carla 2026-02-03 15:29:31 +01:00
  • 7041aa320a refactor carla 2026-02-03 15:23:35 +01:00
  • 96daf2a089 docs: update changelog carla 2026-02-03 14:57:45 +01:00
  • b2e9aff359 test: add tests carla 2026-02-03 14:37:48 +01:00
  • 4ea31f0f37 Add email-change permission validation for linked members Moritz 2026-02-03 14:35:32 +01:00
  • ad02f8914f Use EmailSync.Loader.get_linked_user in EmailNotUsedByOtherUser Moritz 2026-02-03 14:35:08 +01:00
  • 3d46ba655f Add Actor.permission_set_name/1 and admin?/1 for consistent capability checks Moritz 2026-02-03 14:34:24 +01:00
  • 6aba54df68 feat: move import/export to own section carla 2026-02-03 14:19:36 +01:00
  • 7f001c55c5
         feat: add ui to add members to groups Simon 2026-02-03 11:44:08 +01:00
  • c998d14b95 Merge pull request 'Implements custom field CSV import closes #338' (#395) from feature/338_import_custom_fields into main carla 2026-02-02 17:05:29 +01:00
  • 960506d16a refactoring carla 2026-02-02 16:52:35 +01:00
  • aef3aa299f fix test carla 2026-02-02 15:04:07 +01:00
  • b21c3df7ef refactoring carla 2026-02-02 14:34:12 +01:00
  • 71db9cf3c1 formatting carla 2026-02-02 13:54:27 +01:00
  • 9e27de84cb Merge branch 'main' into feature/338_import_custom_fields carla 2026-02-02 13:46:05 +01:00
  • c56ca68922 docs: update docs carla 2026-02-02 13:42:24 +01:00
  • f5591c392a i18n: add translation carla 2026-02-02 13:41:59 +01:00
  • aab5666f46 Merge pull request 'Adds config for import limits closes #336' (#394) from feature/336_import_auth into main carla 2026-02-02 13:15:22 +01:00
  • 12715f3d85 refactoring carla 2026-02-02 13:07:08 +01:00
  • 86a3c4e50e tests: add tests for import carla 2026-02-02 13:07:00 +01:00
  • 3f8797c356 feat: import custom fields via CSV carla 2026-02-02 11:42:07 +01:00
  • ce6240133d i18n: update translations carla 2026-02-02 10:23:49 +01:00