Rosa Gutierrez 641e67dc2e Remove status from allowed parameters in CardsController#update ...

We don't allow changing the status via this action, and it's confusing
and can lead to cases where someone can set someone's else card as
draft, effectively hiding it.

2025-12-19 22:35:30 +01:00

..

account

Add validation for the join code usage limit

2025-12-10 10:10:08 -05:00

boards

replace destroy column turbo stream for redirect_back_or_to

2025-12-11 10:42:44 +01:00

cards

Add UI to prevent assigning more than 10 asignees

2025-12-15 16:40:52 +01:00

columns

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

concerns

Use same constant for fake magic links

2025-12-19 19:21:58 +01:00

events

More robust implementation to prevent method injection attacks

2025-11-21 10:38:16 +01:00

filters

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

my

Revert "Merge pull request #1865 from basecamp/public-avatar-caching"

2025-12-15 13:07:13 +00:00

notifications

Add API for reading notifications

2025-12-10 09:23:52 +01:00

prompts

Use Card number as the model param

2025-11-17 09:12:41 -05:00

public

Show only public cards on public boards

2025-12-15 13:15:36 +01:00

searches

Remove anemic concern

2025-11-03 15:27:12 +01:00

sessions

Replace handle_ naming

2025-12-19 19:21:58 +01:00

signups

Organize everything under Signups

2025-11-29 11:46:09 +01:00

users

Revert "Merge pull request #1865 from basecamp/public-avatar-caching"

2025-12-15 13:07:13 +00:00

webhooks

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

admin_controller.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

application_controller.rb

refactor: use MULTI_TENANT env variable, model concern instead of controller (#accepting_signups?)

2025-12-10 15:14:22 +01:00

boards_controller.rb

🐛 fix: resolve stale account names in jump menu and page titles

2025-12-15 15:59:25 +08:00

cards_controller.rb

Remove status from allowed parameters in CardsController#update

2025-12-19 22:35:30 +01:00

events_controller.rb

Remove unnecessary filtering code

2025-10-03 10:56:34 +02:00

filters_controller.rb

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

join_codes_controller.rb

feat: add rate limit to join codes controller

2025-12-12 17:21:57 +01:00

landings_controller.rb

Redirect to root to avoid changing the path by default

2025-11-05 19:00:50 +01:00

notifications_controller.rb

Lower the number of returned unread notifications

2025-12-10 09:23:52 +01:00

pwa_controller.rb

Fix authentication on "untenanted" controllers

2025-11-17 09:11:47 -05:00

qr_codes_controller.rb

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

searches_controller.rb

Inline anemic method

2025-11-18 15:48:40 +01:00

sessions_controller.rb

Replace handle_ naming

2025-12-19 19:21:58 +01:00

signups_controller.rb

Naming

2025-12-11 11:20:43 +00:00

tags_controller.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller.rb

Handle user update failures

2025-12-10 09:23:53 +01:00

webhooks_controller.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00