Commit graph

513 commits

Author SHA1 Message Date
Chris Veleris
08f56ceb44 fixup! Add tests 2025-10-22 16:28:13 +03:00
Chris Veleris
02633da704 Add tests 2025-10-22 15:56:48 +03:00
Chris Veleris
bbc4615ee3 Fix an issue with sharing permissions 2025-10-22 13:29:37 +03:00
Chris Veleris
dde704d764 Fix an issue with tasks permissions on shared project 2025-10-22 12:10:50 +03:00
Chris Veleris
cbffc564af release: v0.84.1 2025-10-20 18:27:19 +03:00
Chris Veleris
e363202dad Update dependencies 2025-10-20 16:17:07 +03:00
Chris Veleris
82c994bd00 release: v0.84.1-rc1 2025-10-20 16:09:17 +03:00
Chris
0e6295608c
Merge pull request #429 from chrisvel/fix-timezones-missing
Fix timezones missing
2025-10-20 16:07:32 +03:00
Chris Veleris
86bce31992 fixup! Scaffold timezone package 2025-10-20 16:01:49 +03:00
Chris
31868d8a67
Merge pull request #428 from chrisvel/fix-users-migrations
Fix user roles migrations
2025-10-20 15:49:51 +03:00
antanst
4774331d07 Add migration to backfill roles for existing users
This migration backfills role entries for users that existed before the roles system was introduced.

- If no admins exist: Missing users become admins to prevent lockout
- If admins exist: Missing users become regular users (safe default)
- Idempotent: Safe to run multiple times
2025-10-20 14:43:42 +03:00
Chris Veleris
5e1c67e1c1 Scaffold timezone package 2025-10-20 13:32:03 +03:00
Chris
2da6b98e5e
Merge pull request #426 from chrisvel/fix-inbox-20
Fix inbox sidebar counter
2025-10-20 12:17:03 +03:00
Chris Veleris
02854b2fa3 Fix inbox sidebar counter 2025-10-20 12:16:12 +03:00
Chris
e066713969
Merge pull request #425 from chrisvel/fix-note-deletion
Fix note modal deletion confirmation box
2025-10-20 12:13:41 +03:00
Chris Veleris
3d7d61ee8b Fix note modal deletion confirmation box 2025-10-20 12:12:34 +03:00
Chris
e515667843
Merge pull request #424 from chrisvel/fix-create-one-note
Fix not visible note button
2025-10-20 11:26:04 +03:00
Chris Veleris
a56d12b441 Fix not visible note button 2025-10-20 11:21:35 +03:00
Chris
1d1d07059c
Merge pull request #423 from chrisvel/fix-dialog-hide
Fix modal closing when dragging content
2025-10-20 10:54:13 +03:00
Chris Veleris
3c7a4851bb Fix modal closing when dragging content 2025-10-20 10:50:26 +03:00
Chris
1bab67843a
Merge pull request #422 from chrisvel/fix-inbox-uid
Fix inbox uid
2025-10-20 00:09:22 +03:00
Chris Veleris
8e0fae675c Update readme and website 2025-10-20 00:05:54 +03:00
Chris Veleris
848296421e Add UIDs to database items missing 2025-10-18 23:05:34 +03:00
Chris Veleris
589aafa643 Add UIDs to database items missing 2025-10-18 23:04:27 +03:00
Chris Veleris
e17b3f4b4e release: v0.84 2025-10-18 22:19:47 +03:00
Chris Veleris
8fd3ef4b58 release: v0.84-rc1 2025-10-17 18:15:19 +03:00
Chris
13c972f697
Merge pull request #414 from chrisvel/fix-project-sharing-table
Add user edit
2025-10-15 16:50:08 +03:00
Chris Veleris
7178f3dccb Add user edit 2025-10-15 16:48:03 +03:00
Chris
3582a0ccd1
Merge pull request #413 from chrisvel/fix-sharing-translations
Add translations for project sharing
2025-10-15 13:10:34 +03:00
Chris Veleris
2cd7d9abe4 Add translations 2025-10-15 13:05:57 +03:00
Chris Veleris
d60ed23f18 Improve migrations safe functions usage 2025-10-14 12:58:30 +03:00
David Leibovych
6ff5c1a87a fix: copy manifest.json to Docker app dir 2025-10-14 12:48:33 +03:00
Chris
abbc946f93
Merge pull request #402 from chrisvel/pro/user-perms
Add sharing of projects among users.
2025-10-14 12:46:54 +03:00
Chris Veleris
5399bab7f9 Cleanup 2025-10-13 11:09:20 +03:00
Chris Veleris
6eaf4e723e Fix mobile view 2025-10-13 11:09:19 +03:00
Chris Veleris
6589836336 Fix tags badge inconsistency 2025-10-13 11:09:19 +03:00
Chris Veleris
4aa9220879 Fix showing edit/delete buttons for owners 2025-10-13 11:09:19 +03:00
Chris Veleris
5160ab6955 Tweak UI for feature 2025-10-13 11:09:19 +03:00
Chris
e134ad96dc
Merge branch 'main' into pro/user-perms 2025-10-11 14:46:14 +03:00
Chris Veleris
b78cb55caf fixup! Add user name and surname 2025-10-11 13:26:56 +03:00
Chris Veleris
d03cb0c4ae Add user name and surname 2025-10-11 13:26:56 +03:00
Chris Veleris
db98b7be1b fixup! Fix an issue with user data persistance 2025-10-11 13:26:56 +03:00
Chris Veleris
167868d297 Fix an issue with user data persistance 2025-10-11 13:26:56 +03:00
Chris
a81ca2f2b6
Fix upcoming completed issue (#404)
* Fix upcoming completed issue

* fixup! Fix upcoming completed issue

* fixup! fixup! Fix upcoming completed issue

* Fix completed icon plscement

* fixup! Fix completed icon plscement

* Add upcoming section tests
2025-10-11 00:08:13 +03:00
antanst
5ae05a9e68 Linting. 2025-10-09 11:39:30 +03:00
antanst
f4214c40da Security fixes: Add auth to upload, fix SQL injection, improve error logging
Critical security improvements:
- Add requireAuth middleware to /api/upload/project-image endpoint (prevents unauthenticated file uploads)
- Fix SQL injection vulnerability in tasks.js DELETE route by whitelisting table names
- Add missing resource existence check in shares.js POST endpoint (prevents permissions on non-existent resources)

Code quality improvements:
- Replace all console.error with logError across all route files for consistent logging
- Import logError service in all route modules

All tests passing (597 passed).
2025-10-09 11:38:26 +03:00
antanst
1fa221db54 Merge chrisvel/main into pro/user-perms
- Keep :uid endpoints throughout (not :id)
- Keep hasAccess middleware for permission checks
- Keep logError instead of console.error
- Add Note orphaning in project deletion
- Merge area attributes (include uid)
- Merge project store update on delete
- Use uid in test data-testids
2025-10-09 11:15:02 +03:00
Chris
6efb565a4e
Feat/persist project view (#401)
* Persist project view selection

* fixup! Persist project view selection
2025-10-08 17:46:20 +03:00
Chris Veleris
abb1cb875b release: v0.83.2 2025-10-07 17:14:21 +03:00
Chris
119b04acff
Fix inbox items refresh (#398)
* Fix inbox items refresh

* fixup! Fix inbox items refresh
2025-10-07 17:10:33 +03:00