Jeremy Daer 9f6a4f1cc6 Fix unauthorized column reordering ...

Users could reorder columns they didn't have access to. Fixed by
limiting ColumnScoped to User::Accessor#accessible_columns.

References https://hackerone.com/reports/3449905

2025-12-03 13:00:49 -08:00

..

assets

Target tooltips instead of specific buttons

2025-12-03 11:16:37 -06:00

channels/application_cable

Clean up some spots where "current account" is ambiguous

2025-11-17 09:12:41 -05:00

controllers

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

helpers

Fix: edit comment button disappears when morphing the page

2025-12-02 07:06:50 +01:00

javascript

Capture key presses inside the column edit form to prevent interferences with column navigation

2025-12-03 13:28:44 +01:00

jobs

Add "data export" feature

2025-12-01 15:23:26 +00:00

mailers

Mailer copy

2025-12-01 22:27:53 -06:00

models

Fix unauthorized column reordering

2025-12-03 13:00:49 -08:00

views

Capture key presses inside the column edit form to prevent interferences with column navigation

2025-12-03 13:28:44 +01:00