Jeremy Daer 9f6a4f1cc6 Fix unauthorized column reordering ...

Users could reorder columns they didn't have access to. Fixed by
limiting ColumnScoped to User::Accessor#accessible_columns.

References https://hackerone.com/reports/3449905

2025-12-03 13:00:49 -08:00

..

cards/drops

Add tests for new controllers

2025-09-28 21:11:07 +02:00

left_positions_controller_test.rb

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

right_positions_controller_test.rb

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00