Moritz 543fded102 Harden member user-link check: argument presence, nil actor, policy scope ... - Forbid on :user argument presence (not value) to block unlink via nil/empty - Defensive nil actor handling; policy restricted to create/update only - Test: Ash.load with actor; test non-admin cannot unlink via user: nil - Docs: unlink behaviour and policy split		2026-02-04 14:07:39 +01:00
..
changes	feat: add groups resource #371	2026-01-27 16:03:21 +01:00
member/changes	docs: add typespec for SetDefaultMembershipFeeType.change/3	2025-12-26 21:40:32 +01:00
setting/changes	feat: add atomic update for single member field visibility	2026-01-08 11:28:27 +01:00
custom_field.ex	Add CustomField resource policies and tests	2026-01-29 16:10:12 +01:00
custom_field_value.ex	CustomFieldValue: remove unused require Ash.Query	2026-01-27 16:07:01 +01:00
email.ex	fix: Allow optional email values in custom fields	2025-11-13 18:40:18 +01:00
group.ex	Add resource policies for Group, MemberGroup, MembershipFeeType, MembershipFeeCycle	2026-02-03 23:52:12 +01:00
member.ex	Harden member user-link check: argument presence, nil actor, policy scope	2026-02-04 14:07:39 +01:00
member_group.ex	MemberGroup: restrict bypass to own_data via MemberGroupReadLinkedForOwnData	2026-02-04 09:19:57 +01:00
membership.ex	CustomField policies: actor required, no system-actor fallback, error handling	2026-01-29 16:10:12 +01:00
setting.ex	Setting: remove unused actor in default_fee_type validation	2026-02-04 11:40:19 +01:00