Stanko Krtalić 7a0290a4af Merge pull request #1841 from basecamp/fix-access-control-issues ...

Allow only the owner of a reaction to delete it

2025-12-03 11:33:36 +01:00

..

account

Formatting

2025-12-01 17:19:59 +00:00

admin

Add recent signups to the dashboard

2025-12-02 11:18:46 -05:00

boards

Preload cards for columns

2025-11-17 16:16:19 +01:00

cards

Allow only the owner of a reaction to delete it

2025-12-03 11:10:44 +01:00

columns

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

concerns

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

events

More robust implementation to prevent method injection attacks

2025-11-21 10:38:16 +01:00

filters

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

my

Invalidate HTTP caching when the cards change

2025-11-21 09:32:02 +01:00

notifications

Remove a bunch of N+1s

2025-11-27 11:08:45 -05:00

prompts

Use Card number as the model param

2025-11-17 09:12:41 -05:00

public

Use Card number as the model param

2025-11-17 09:12:41 -05:00

searches

Remove anemic concern

2025-11-03 15:27:12 +01:00

sessions

Make sign up Magic Links work across devices

2025-11-29 12:36:00 +01:00

signups

Organize everything under Signups

2025-11-29 11:46:09 +01:00

users

Serve system user avatar as an asset

2025-11-24 13:16:14 +01:00

webhooks

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

admin_controller.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

application_controller.rb

Robots, begone (#1812)

2025-12-02 13:35:58 -08:00

boards_controller.rb

Allow only people who can administer a board to delete it

2025-12-03 10:56:05 +01:00

cards_controller.rb

Update card buttons dynamically

2025-11-22 12:14:39 -05:00

events_controller.rb

Remove unnecessary filtering code

2025-10-03 10:56:34 +02:00

filters_controller.rb

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

join_codes_controller.rb

Add some protections around sharing the magic link in development

2025-12-02 10:51:14 +01:00

landings_controller.rb

Redirect to root to avoid changing the path by default

2025-11-05 19:00:50 +01:00

notifications_controller.rb

Cap the max number of unread notifications to 500

2025-11-21 15:55:24 +01:00

pwa_controller.rb

Fix authentication on "untenanted" controllers

2025-11-17 09:11:47 -05:00

qr_codes_controller.rb

Scope jobs and controllers by account

2025-11-17 09:12:41 -05:00

searches_controller.rb

Inline anemic method

2025-11-18 15:48:40 +01:00

sessions_controller.rb

Add some protections around sharing the magic link in development

2025-12-02 10:51:14 +01:00

signups_controller.rb

Remove basic auth restriction on signup

2025-12-02 09:12:47 +01:00

users_controller.rb

Conventional order and remove redundant filtering of actions

2025-11-18 15:49:50 +01:00

webhooks_controller.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00