kolaente af8beb5758 fix(user): skip last-admin guard when target is already unreachable ...

GuardLastAdmin counted only active, non-deletion-scheduled admins, but gated only on target.IsAdmin. Demoting or deleting an already-disabled or deletion-scheduled admin would then be blocked whenever exactly one active admin remained, even though removing a user who isn't in the reachable set can't reduce the count. Return early when the target isn't part of the counted set.

2026-04-20 18:55:06 +00:00

..

caldav_token.go

fix(caldav): eliminate nested db session in CalDAV auth

2026-03-03 10:41:19 +01:00

db.go

feat: register Vikunja tables with db package at init

2026-03-04 15:37:54 +01:00

delete.go

fix: address review comments on session lifecycle

2026-02-25 11:03:02 +01:00

error.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

events.go

…

is_admin_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

listeners.go

…

main_test.go

…

notifications.go

…

test.go

test: add TOTP fixture and load it in user test bootstrap

2026-03-23 10:34:49 +00:00

token.go

fix(auth): correctly delete older password reset tokens in cron

2026-02-27 14:44:26 +01:00

totp_test.go

test(user): cover TOTP lockout persistence and password-reset unlock

2026-04-09 16:08:26 +00:00

totp.go

fix(security): persist TOTP lockout across login rollback

2026-04-09 16:08:26 +00:00

update_email_test.go

…

update_email.go

fix: eliminate nested database sessions to prevent table locks

2026-02-25 11:03:02 +01:00

user_claims_test.go

feat(user): extract last-admin guard and close invariant gaps

2026-04-20 18:55:06 +00:00

user_create.go

refactor(user): export IsErrUserStatusError for use across packages

2026-03-23 12:06:16 +00:00

user_email_confirm_test.go

…

user_email_confirm.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_password_reset.go

fix(user): handle status errors in pkg/user callers, remove redundant checks

2026-03-23 12:06:16 +00:00

user_test.go

test(auth): add comprehensive disabled/locked user auth tests

2026-03-23 16:37:26 +00:00

user.go

fix(user): skip last-admin guard when target is already unreachable

2026-04-20 18:55:06 +00:00

users_project.go

fix: add ORDER BY to ListUsers query for deterministic ordering

2026-03-27 23:05:04 +00:00

validator.go

feat(api): enforce password validation on reset and update flows

2026-02-25 13:44:56 +01:00