bterkuile/fizzy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
9f6a4f1cc62b4d68db644838ccfab2dac5de396e
fizzy/app/models
T
History
Jeremy Daer 9f6a4f1cc6 Fix unauthorized column reordering 
Users could reorder columns they didn't have access to. Fixed by
limiting ColumnScoped to User::Accessor#accessible_columns.

References https://hackerone.com/reports/3449905
2025-12-03 13:00:49 -08:00
..
account
Fix crash in join code redemption race condition
2025-12-03 13:29:20 +01:00
board
Scope general broadcasts by account
2025-12-02 18:10:49 +01:00
card
Merge pull request #1768 from basecamp/data-exports
2025-12-02 09:56:40 +00:00
column
Revert "Revert "Color a11y""
2025-11-14 11:24:55 +01:00
comment
Missed a few changes in a rebase somewhere
2025-11-17 09:19:46 -05:00
concerns
Move Eventable concern to app/models/concerns
2025-12-03 16:36:15 +00:00
event
Clarify not now move actions copy
2025-11-24 12:03:34 +01:00
filter
Should be "Done" when user-facing
2025-11-17 16:59:56 -06:00
identity
Fix crash in join code redemption race condition
2025-12-03 13:29:20 +01:00
magic_link
Add sign in flow using magic links
2025-10-31 16:22:12 +01:00
notification
Handle notifs created before the current bundle starts_at
2025-11-22 22:38:23 -05:00
notifier
Always include assignees when notifying of published cards
2025-11-10 13:08:51 +01:00
push
Scope model methods by account
2025-11-17 09:12:41 -05:00
search
Auto default for UUID primary keys
2025-12-03 14:27:52 +00:00
signup
Bring simple signup flow from the fizzy-saas gem
2025-11-28 15:53:58 +01:00
tag
Move inside concerns or the override won't work
2025-07-03 23:06:37 +02:00
user
Fix unauthorized column reordering
2025-12-03 13:00:49 -08:00
webhook
Prohibit link local addresses
2025-12-02 09:32:15 +01:00
access.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
account.rb
(account): encode external_account_id in slug
2025-12-02 16:07:04 -05:00
application_platform.rb
Design flow for enabling push and the various status that go with it
2025-07-21 18:27:31 -05:00
application_record.rb
Auto default for UUID primary keys
2025-12-03 14:27:52 +00:00
assignment.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
board.rb
Fix tests after the removal of memberships
2025-11-17 09:12:40 -05:00
card.rb
Merge pull request #1768 from basecamp/data-exports
2025-12-02 09:56:40 +00:00
closure.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
color.rb
Keep current logical names for colors
2025-11-14 11:44:04 +01:00
column.rb
Update sign up
2025-11-17 09:12:40 -05:00
comment.rb
Remove a bunch of N+1s
2025-11-27 11:08:45 -05:00
current.rb
Simplify Current.with_account and .without_account
2025-11-26 12:31:49 -05:00
entropy.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
event.rb
style: rubocop fix
2025-11-27 12:34:31 -05:00
filter.rb
Remove N+1 on the cards board.
2025-11-27 11:30:54 -05:00
identity.rb
Make sign up Magic Links work across devices
2025-11-29 12:36:00 +01:00
magic_link.rb
Make sign up Magic Links work across devices
2025-11-29 12:36:00 +01:00
mention.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
notification_pusher.rb
Missed a few changes in a rebase somewhere
2025-11-17 09:19:46 -05:00
notification.rb
Remove a bunch of N+1s
2025-11-27 11:08:45 -05:00
notifier.rb
Process notification recipients in consistent order
2025-11-20 09:20:48 +00:00
pin.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
push.rb
Whitespace
2025-07-21 20:11:03 -05:00
qr_code_link.rb
Scope jobs and controllers by account
2025-11-17 09:12:41 -05:00
reaction.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
search.rb
Remove wrapper methods and kwargs
2025-11-21 14:53:17 +00:00
session.rb
Remove the untenanted database
2025-11-17 09:11:36 -05:00
signup.rb
Introduce an "owner" role, and prevent it from being administered
2025-11-29 14:13:29 -05:00
step.rb
Update sign up
2025-11-17 09:12:40 -05:00
tag.rb
Combine uuid-old and uuid branch changes
2025-11-17 09:12:34 -05:00
tagging.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
time_window_parser.rb
Add chip filters for the new time window filters
2025-06-27 13:38:45 +02:00
user.rb
Disconnect action cable when user is deactivated
2025-12-02 14:26:04 -05:00
watch.rb
Finish the rollout of account_id to all core data models
2025-11-17 09:12:40 -05:00
webhook.rb
Scope model methods by account
2025-11-17 09:12:41 -05:00