 claude_code
|
4df79aafd3
|
test(server): batch 5 authorization, transclusion, search & comment coverage
Test-only. Fills the authorization / data-integrity gaps from the strategy
report. Full server suite: 100 suites / 1031 passed + 1 todo, green.
Authorization (privilege-escalation catches):
- workspace/space ability factories: exact can/cannot per (action,subject) —
admin cannot Manage Audit, writer/reader cannot Manage Settings/Member, etc.
- findHighestUserSpaceRole, isAdminActingOnOwner.
- WorkspaceService role guards: last-owner lockout, admin-over-owner, self-target.
- SpaceMemberService.validateLastAdmin: never orphan a space without an admin.
- GroupService: default-group immutability, name uniqueness.
Access / data integrity:
- PageAccessService: restriction-vs-space-ability branches for view/edit/comment.
- TransclusionService.unsyncReference: cross-workspace/NotFound boundary asserts
NO attachment write or ref-row delete on rejection; lookupWithAccessSet
positional status mapping; listReferences drops private/cross-ws/deleted refs;
syncPageTransclusions/References diff (no-op on unchanged content).
- SearchService.searchPage: query-mode scoping; leakage modes return empty
before executing the query.
- CommentService: reply-to-reply guard, agent provenance, self-mention filter,
no double-notify.
Pure helpers:
- prosemirror extractors (mention dedup-key id-vs-entityId, attachment UUID
validation, removeMarkTypeFromDoc), collaboration.util (getPageId,
isEmptyParagraphDoc, stripUnknownNodes unwrap, prosemirrorNodeToYElement).
Reviewed (APPROVE WITH SUGGESTIONS): mutation-resistant, not vacuous.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-21 18:40:07 +03:00 |
|
 Philipinho
|
b1510cd6d7
|
fix
|
2026-03-02 22:09:57 +00:00 |
|
|
Philip Okugbe
|
3164b6981c
|
feat: api keys management (EE) (#1665)
* feat: api keys (EE)
* improvements
* fix table
* fix route
* remove token suffix
* api settings
* Fix
* fix
* fix
* fix
|
2025-10-07 21:05:13 +01:00 |
|
|
Philip Okugbe
|
6c422011ac
|
feat: public page sharing (#1012)
* Share - WIP
* - public attachment links
- WIP
* WIP
* WIP
* Share - WIP
* WIP
* WIP
* include userRole in space object
* WIP
* Server render shared page meta tags
* disable user select
* Close Navbar on outside click on mobile
* update shared page spaceId
* WIP
* fix
* close sidebar on click
* close sidebar
* defaults
* update copy
* Store share key in lowercase
* refactor page breadcrumbs
* Change copy
* add link ref
* open link button
* add meta og:title
* add twitter tags
* WIP
* make shares/info endpoint public
* fix
* * add /p/ segment to share urls
* minore fixes
* change mobile breadcrumb icon
|
2025-04-22 20:37:32 +01:00 |
|
|
Philipinho
|
d4eefa48a8
|
restructure directories
* set log level based on env
|
2024-06-09 15:57:52 +01:00 |
|
|
Philipinho
|
886d9591fa
|
frontend permissions
* rework backend workspace permissions
|
2024-06-03 02:54:12 +01:00 |
|
|
Philipinho
|
06d854a7d2
|
refactor layout
* ui polishing
* frontend and backend fixes
|
2024-05-31 21:51:44 +01:00 |
|
|
Philipinho
|
9c7c2f1163
|
updates and fixes
* seo friendly urls
* custom client serve-static module
* database fixes
* fix recent pages
* other fixes
|
2024-05-18 03:19:42 +01:00 |
|
|
Philipinho
|
eefe63d1cd
|
implement new invitation system
* fix comments on the frontend
* move jwt token service to its own module
* other fixes and updates
|
2024-05-14 22:55:11 +01:00 |
|
|
Philipinho
|
28ec542ed6
|
server: page permissions
|
2024-04-22 02:25:03 +01:00 |
|
|
Philipinho
|
90ae750d48
|
space updates
* space UI
* space management
* space permissions
* other fixes
|
2024-04-12 19:38:58 +01:00 |
|
|
Philipinho
|
c18c9ae02b
|
Refactoring
* replace TypeORM with Kysely query builder
* refactor migrations
* other changes and fixes
|
2024-03-29 01:46:11 +00:00 |
|
|
Philipinho
|
51baf30f0d
|
Use polymorphic table for space membership
|
2024-03-22 00:40:13 +00:00 |
|
|
Philipinho
|
a821e37028
|
Refactoring
* Refactor workspace membership system
* Create setup endpoint
* Use Passport.js
* Several updates and fixes
|
2024-03-16 22:58:12 +00:00 |
|
|
Philipinho
|
b42fe48e9b
|
feat: role authorizations - WIP
|
2024-03-08 23:55:42 +00:00 |
|