Mike Dalessio e27c0c5fa1 Filter draft cards from public closed column (#2667) ...

The public closed column was showing draft cards because it queried
`@board.cards.closed` without a `.published` filter. This adds the
missing `.published` scope to match the pattern used elsewhere in the
public controllers.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-05 20:31:41 -05:00

..

account

Finishing touches

2026-02-02 18:06:19 +01:00

boards

replace destroy column turbo stream for redirect_back_or_to

2025-12-11 10:42:44 +01:00

cards

Reinstate card readings

2026-02-17 13:57:24 +01:00

columns

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00

concerns

Remove redundant insecure context CSRF check

2026-02-18 14:06:46 -05:00

events

More robust implementation to prevent method injection attacks

2025-11-21 10:38:16 +01:00

filters

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

my

Add JSON response format to access token creation (#2662)

2026-03-05 13:48:51 -04:00

notifications

Fix query parameter name

2026-02-12 14:55:34 +03:00

prompts

Omit inactive users from board mention picker

2026-02-03 18:42:15 -05:00

public

Filter draft cards from public closed column (#2667)

2026-03-05 20:31:41 -05:00

searches

Remove anemic concern

2025-11-03 15:27:12 +01:00

sessions

Add JSON format support to signup flow for native API clients

2026-01-30 13:41:37 +01:00

signups

Small native API changes: include identity ID, return empty signup completion body

2026-02-25 14:34:09 +01:00

users

Convert Account::SingleUserExport to User::DataExport

2026-02-02 12:36:48 +01:00

webhooks

Fix IDOR in webhook activation endpoint (#2431)

2026-01-24 17:06:12 -08:00

admin_controller.rb

Make mission control only accessible for staff members

2025-11-28 15:53:58 +01:00

application_controller.rb

refactor: use MULTI_TENANT env variable, model concern instead of controller (#accepting_signups?)

2025-12-10 15:14:22 +01:00

boards_controller.rb

Fix N+1 queries on identity in UsersController and BoardsController (#2365)

2026-02-25 13:10:56 -05:00

cards_controller.rb

Use a dedicated resource for showing cards in draft mode

2026-01-08 10:40:21 +01:00

client_configurations_controller.rb

Implement ClientConfigurationsController for mobile client path config.

2026-02-24 11:25:07 +01:00

events_controller.rb

Remove unnecessary filtering code

2025-10-03 10:56:34 +02:00

filters_controller.rb

Several fixes for saving filters

2025-09-22 12:55:19 +02:00

join_codes_controller.rb

feat: add rate limit to join codes controller

2025-12-12 17:21:57 +01:00

landings_controller.rb

Ensure the flash notice passes through the redirect

2025-12-20 18:04:56 -06:00

notifications_controller.rb

Lower the number of returned unread notifications

2025-12-10 09:23:52 +01:00

pwa_controller.rb

Fix authentication on "untenanted" controllers

2025-11-17 09:11:47 -05:00

qr_codes_controller.rb

Add padding to QR code images

2026-01-29 09:57:52 +01:00

searches_controller.rb

Add a line break, it looks better

2026-02-19 14:25:26 +01:00

sessions_controller.rb

Add JSON format support to session destroy for native API clients

2026-01-27 19:59:30 +01:00

signups_controller.rb

Naming

2025-12-11 11:20:43 +00:00

tags_controller.rb

Add pagination to most places and fix cards pagination

2025-12-10 09:23:52 +01:00

users_controller.rb

Fix N+1 queries on identity in UsersController and BoardsController (#2365)

2026-02-25 13:10:56 -05:00

webhooks_controller.rb

Baseline replacing collection with board across code

2025-11-05 13:31:54 +01:00