edf6b53469
Introduce an "owner" role, and prevent it from being administered
...
to prevent the owner from being demoted or kicked out.
ref: https://app.fizzy.do/5986089/cards/3213
2025-11-29 14:13:29 -05:00
8baf5b8abd
Make mission control only accessible for staff members
2025-11-28 15:53:58 +01:00
7f46063c25
Introduce gitleaks to the codebase
...
- `bin/setup` installs gitleaks
- add `gitleaks dir` command to CI
- configure gitleaks to ignore tmp, log, and encrypted files
- tag existing false positives with `gitleaks:allow`
- add historical false positives to the ignore list
2025-11-26 15:46:47 -05:00
e0aa1d257e
Drop User.system and replace with Account#system_user
2025-11-24 13:23:57 -05:00
4976e4a7bb
Update Card::Entropic so its scopes work cross-accounts
...
with an eye towards making the postpone_all_due recurring job work efficiently.
2025-11-17 09:12:41 -05:00
fe6df7085f
Finish the rollout of account_id to all core data models
...
Schema:
- add account_id to tables it was missing from
- make account_id a required column everywhere
- add [account_id] indexes, or add `account_id` to existing indices
Models:
- add `belongs_to :account` to all models (default to using a domain
model's account whenever possible)
- add account_id in all the necessary fixtures
- add account_id to insert_all hashes
- pass account_id to a few initialize calls
Miscellaneous:
- update the import script to set account_id
Note that I'm not adding account_id to the join tables primarily
because I couldn't think of an easy way to populate it without making
it a full Join model, and that was more work than I have time to take
on right now.
2025-11-17 09:12:40 -05:00
8fa9566c07
Update sign up
2025-11-17 09:12:40 -05:00
0e3084f9d3
Fix up join code fixtures and tests
2025-11-17 09:12:36 -05:00
e9e68646e3
Fix this test without changing app code
2025-11-17 09:12:31 -05:00
1959e15f7e
Fix more tests
...
These are mainly because the fixture's UUIDs are deterministic rather
than time-sortable, and more places where we need to correct the fixture
IDs as well.
2025-11-17 09:12:31 -05:00
c97ea9131f
Fix some failing Tests
...
- Add explicit IDs to fixtures to avoid getting ints
- Remove ordering dependencies in assertions
2025-11-17 09:12:31 -05:00
e4011ef211
Update primary keys on customer data to UUIDs
...
- schema changes to primary and foreign keys
- fixture changes
- customer data models subclass AccountScopedRecord
- import script updated
2025-11-17 09:12:30 -05:00
6858b96619
Simplify join codes
2025-11-17 09:12:17 -05:00
32d96db7d9
Replace card id with card number
2025-11-17 09:12:15 -05:00
fbda61f45d
Remove TODO comment that I completed
2025-11-17 09:11:57 -05:00
ff8d786144
Filter boards by account
2025-11-17 09:11:57 -05:00
dbf66f9a50
Constrain user queries to the current or relevant account
2025-11-17 09:11:57 -05:00
8b1ca5e7fb
Remove unused account associations
2025-11-17 09:11:42 -05:00
1d6dd09272
Update fixutres
2025-11-17 09:11:42 -05:00
006aa4d6b3
Tests need to set up the script_name properly
...
which requires tweaking fixtures for the memberships and the account
2025-11-17 09:11:42 -05:00
362427b383
More changes to get setup and tests to run
2025-11-17 09:11:42 -05:00
80d309cd22
Keep current logical names for colors
...
So that the db values are not tied to the specific CSS
2025-11-14 11:44:04 +01:00
1f56adf8aa
Reuse logo as avatar
2025-11-07 12:56:43 +01:00
f544dc74f5
Add test
2025-11-07 12:55:04 +01:00
39ec6cf062
Replace collection with board in the code, tests green
2025-11-05 13:41:12 +01:00
03a345609e
Baseline replacing collection with board across code
2025-11-05 13:31:54 +01:00
5f26690aa1
Redirect to the account you joined after sign in
2025-11-04 07:20:16 +01:00
b3474ec97d
Rename Entropy::Configuration to just Entropy
2025-11-02 13:11:41 +01:00
98755844a1
Remove the internal API
...
* Bind sessions to identities
* Remove references to the identity token
* Move email changes to identity
* Move account menu into a turbo-frame
* Create tenants from a tenanted route
2025-10-31 16:26:08 +01:00
79b012f319
Add Join Codes
2025-10-31 16:24:30 +01:00
c8843360fe
Clean up and simplify magic links
2025-10-31 16:23:38 +01:00
5cef4ffeb0
Add sign in flow using magic links
2025-10-31 16:22:12 +01:00
d0215e9fd2
Introduce untenanted Identity and Membership models
...
and a script to populate these tables for existing 37id users
2025-10-31 16:22:12 +01:00
7a1dde1a81
Add tests
2025-10-29 16:41:04 +01:00
9317a82570
Remove Fizzy Ask
...
Since we are not going to ship it
2025-10-27 14:45:30 +01:00
da413e7540
Remove closure reasons
2025-10-15 16:15:56 -05:00
7cb575b329
Exclude drafts from filtered cards
2025-10-07 10:32:10 +02:00
48783824ee
Fix some small things related to accounts
2025-10-03 16:55:00 -04:00
47370084d2
Remove code related to Launchpad auth or 37id Users
2025-10-02 16:33:23 -04:00
1bb8de8564
Fix tests
2025-09-29 13:13:40 +02:00
e1f052935a
Add test for triaging cards
2025-09-28 22:02:34 +02:00
2f6a639682
Prepare entropy code for the new auto postpone approach
2025-09-24 16:22:42 +02:00
f1da9a6c5f
Adapt fixtures to the new models
2025-09-24 14:09:41 +02:00
dd3063b01d
Simplify delinquency tracking
2025-09-16 20:08:03 +02:00
02a421675f
Scope Webhooks to Collections
2025-09-16 20:07:25 +02:00
9d77b17b8c
Remove encryption
2025-09-16 20:04:20 +02:00
680a69ad29
Add tests for webhooks controllers
2025-09-16 20:04:20 +02:00
1d69b171b6
Test the abuse prevention logic
2025-09-16 20:04:20 +02:00
0bdbc5f5e8
Add abuse prevention
2025-09-16 20:04:18 +02:00
9cfd1e43af
Enable subscribing to specific actions
2025-09-16 20:03:57 +02:00
Mike Dalessio