Rosa Gutierrez b742963f7c Add account ownership check to import GID resolution ...

The convert_gids_to_sgids method resolved GIDs globally and minted
valid SGIDs without verifying the record belongs to the importing
account. This adds the same account_id check that the export path
already has, plus RecordNotFound handling for invalid GIDs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-16 11:49:00 +01:00

..

account

Add account ownership check to import GID resolution

2026-02-16 11:49:00 +01:00

board

Delete pins belonging to cards in a board with revoked access

2026-01-13 16:25:59 +01:00

card

Stack notifications everywhere

2026-02-12 10:29:50 +01:00

column

remove unnecessary callback

2025-12-11 10:25:34 +01:00

comment

Guard search indexing with searchable? check

2026-01-23 12:13:08 -05:00

concerns

Stack notifications everywhere

2026-02-12 10:29:50 +01:00

event

Fix double-escaped HTML entities in webhook payloads

2026-02-13 03:25:59 -05:00

filter

Scope the single-board case to just the creator's boards (#1880)

2025-12-03 15:47:04 -08:00

identity

Only allow writing when the access token has permission

2025-12-10 09:23:52 +01:00

magic_link

Replace custom code generator with Base32

2025-12-12 07:45:23 +01:00

notification

Stack notifications everywhere

2026-02-12 10:29:50 +01:00

notifier

Always include assignees when notifying of published cards

2025-11-10 13:08:51 +01:00

push

Allow chromium unstable endpoint

2025-12-09 20:24:09 -05:00

search

Revert "Add CJK (Chinese, Japanese, Korean) search support"

2026-01-08 21:07:14 +01:00

signup

Bring simple signup flow from the fizzy-saas gem

2025-11-28 15:53:58 +01:00

storage

Storage: harden reconcile for concurrent writes and fix board transfer (#2096)

2025-12-19 13:07:32 -08:00

tag

Move inside concerns or the override won't work

2025-07-03 23:06:37 +02:00

user

Stack notifications everywhere

2026-02-12 10:29:50 +01:00

webhook

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

zip_file

Ignore faulty ZIP files

2026-02-03 14:04:54 +01:00

access.rb

Finish the rollout of account_id to all core data models

2025-11-17 09:12:40 -05:00

account.rb

Hide importing accounts

2026-02-02 12:36:48 +01:00

admin.rb

Add billing system with Stripe

2025-12-16 16:44:20 +01:00

application_platform.rb

Add platform attribute

2025-12-17 08:56:08 +01:00

application_record.rb

Auto default for UUID primary keys

2025-12-03 14:27:52 +00:00

assignment.rb

Remove model validation

2026-02-02 13:38:34 +01:00

board.rb

Speedy, auditable, deadlock-resistant storage tracking (#2026)

2025-12-10 16:04:30 -08:00

card.rb

Move comment events when card moves to a new board (#2486)

2026-02-04 15:04:28 -05:00

closure.rb

Finish the rollout of account_id to all core data models

2025-11-17 09:12:40 -05:00

color.rb

Keep current logical names for colors

2025-11-14 11:44:04 +01:00

column.rb

rename from sibling_columns to surroundings

2025-12-09 11:28:42 +01:00

comment.rb

Remove model validation

2026-02-02 13:38:34 +01:00

current.rb

Fix Current not setting a session in some contexts

2025-12-10 09:23:52 +01:00

entropy.rb

Fix crash on account destruction

2026-02-02 14:08:52 +01:00

event.rb

style: rubocop fix

2025-11-27 12:34:31 -05:00

export.rb

Fix crash due to missing ActiveStorage URL options

2026-02-02 21:49:06 +01:00

filter.rb

Refactor: improve query scope composition with merge syntax (#2131)

2025-12-13 10:10:13 -08:00

identity.rb

Remove unused association

2026-02-02 12:36:48 +01:00

magic_link.rb

Make sign up Magic Links work across devices

2025-11-29 12:36:00 +01:00

mention.rb

Finish the rollout of account_id to all core data models

2025-11-17 09:12:40 -05:00

notification_pusher.rb

Add self-service account deletion (#2246)

2026-01-12 14:21:05 +01:00

notification.rb

Stack notifications everywhere

2026-02-12 10:29:50 +01:00

notifier.rb

Fix race condition on notification creation

2026-02-13 09:14:24 +01:00

pin.rb

Finish the rollout of account_id to all core data models

2025-11-17 09:12:40 -05:00

push.rb

Whitespace

2025-07-21 20:11:03 -05:00

qr_code_link.rb

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

reaction.rb

Update models, views, and fixtures for polymorphic reactions

2026-01-22 12:29:54 -05:00

search.rb

Revert "Add CJK (Chinese, Japanese, Korean) search support"

2026-01-08 21:07:14 +01:00

session.rb

Remove the untenanted database

2025-11-17 09:11:36 -05:00

signup.rb

Fix account creation and import updates

2026-02-02 12:36:48 +01:00

ssrf_protection.rb

Block IPv4-compatible IPv6 addresses in SSRF protection (#2273)

2025-12-29 21:45:06 -08:00

step.rb

Update sign up

2025-11-17 09:12:40 -05:00

storage.rb

Storage: harden reconcile for concurrent writes and fix board transfer (#2096)

2025-12-19 13:07:32 -08:00

tag.rb

Combine uuid-old and uuid branch changes

2025-11-17 09:12:34 -05:00

tagging.rb

Finish the rollout of account_id to all core data models

2025-11-17 09:12:40 -05:00

time_window_parser.rb

Refactor: Simplify TimeWindowParser using Rails convenience methods

2025-12-13 16:31:48 -03:00

user.rb

Convert Account::SingleUserExport to User::DataExport

2026-02-02 12:36:48 +01:00

watch.rb

Finish the rollout of account_id to all core data models

2025-11-17 09:12:40 -05:00

webhook.rb

Scope model methods by account

2025-11-17 09:12:41 -05:00

zip_file.rb

Ignore faulty ZIP files

2026-02-03 14:04:54 +01:00