Moritz 890a4d3752 MemberGroup: restrict bypass to own_data via MemberGroupReadLinkedForOwnData ... - ActorPermissionSetIs check; bypass policy filters by member_id for own_data only. - Admin with member_id still gets :all via HasPermission. Tests added.		2026-02-04 09:19:57 +01:00
..
accounts	Sync user email to member when changing password (admin_set_password)	2026-01-27 17:58:35 +01:00
fixtures	refactor	2026-01-25 17:31:42 +01:00
membership	Member/Setting/validations: domain, actor, and seeds	2026-02-03 23:52:16 +01:00
membership_fees	Member/Setting/validations: domain, actor, and seeds	2026-02-03 23:52:16 +01:00
mv	MemberGroup: restrict bypass to own_data via MemberGroupReadLinkedForOwnData	2026-02-04 09:19:57 +01:00
mv_web	Secure regenerate_cycles: require can?(:create, MembershipFeeCycle) in handler	2026-02-04 09:19:37 +01:00
support	test: add page permission tests and ConnCase role tags	2026-01-30 00:00:32 +01:00
seeds_test.exs	test: move slow and less critical tests to nightly suite	2026-01-28 14:34:05 +01:00
test_helper.exs	chore: disable test performance output again	2026-01-28 14:54:59 +01:00