vikunja

admin_bypass_test.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

admin_bypass.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

admin_project_list.go

feat(admin): add users/projects list endpoints and is_admin patch

2026-04-20 18:55:06 +00:00

api_routes_test.go

test: add failing test for bulk label API token route registration

2026-03-10 23:58:44 +01:00

api_routes.go

fix(security): enforce HTTP method and path in scoped API token matcher

2026-04-09 15:17:20 +00:00

api_tokens_expiry_cron_test.go

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

api_tokens_expiry_cron.go

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

api_tokens_expiry_notification_test.go

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

api_tokens_expiry_notification.go

fix(notifications): escape markdown in user-controlled strings in email lines

2026-04-09 15:44:04 +00:00

api_tokens_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

api_tokens_test.go

feat: add HasCaldavAccess method to APIToken

2026-03-30 12:09:53 +00:00

api_tokens.go

refactor: extract shared API token validation into ValidateTokenAndGetOwner

2026-03-30 12:09:53 +00:00

bulk_task_test.go

chore(deps): update golangci-lint to 2.6.0 (#1737 )

2025-10-31 17:28:52 +00:00

bulk_task.go

feat: share logic for bulk update (#1456 )

2025-09-10 16:40:59 +00:00

error.go

feat(tasks): cap repeat_after at 10 years to harden repeating-task handler

2026-04-09 16:07:48 +00:00

events.go

feat(webhook): add WebhookDeliveryEvent for per-webhook fan out

2026-04-09 09:26:04 +00:00

export.go

chore(lint): suppress known gosec false positives

2026-03-23 16:23:15 +01:00

favorites.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

kanban_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

kanban_task_bucket_test.go

test(kanban): add failing test for repeating task bucket routing on done (#2573 )

2026-04-09 10:45:34 +00:00

kanban_task_bucket.go

fix(kanban): skip upsert when repeating task already in default bucket (#2573 )

2026-04-09 10:45:34 +00:00

kanban_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

kanban.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

label_permissions.go

fix(labels): derive label max permission from accessible tasks only

2026-04-09 15:43:04 +00:00

label_task_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

label_task_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

label_task.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

label_test.go

fix(labels): derive label max permission from accessible tasks only

2026-04-09 15:43:04 +00:00

label.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

link_sharing_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

link_sharing_test.go

fix(security): validate link share JWTs against DB on every request

2026-04-09 15:38:07 +00:00

link_sharing.go

fix(security): validate link share JWTs against DB on every request

2026-04-09 15:38:07 +00:00

listeners.go

fix(webhook): order matching webhooks by id for deterministic fan-out

2026-04-09 09:26:04 +00:00

main_test.go

refactor: remove environment variable requirements for go test

2026-02-17 18:01:05 +01:00

mentions_test.go

test: add tests for conversational email system

2026-03-08 16:03:47 +01:00

mentions.go

feat: format user mentions with display names in email notifications (#1930 )

2025-12-10 12:39:05 +01:00

message.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

models.go

feat: add OAuth 2.0 authorization code model and migration

2026-03-27 23:05:04 +00:00

notifications_database.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

notifications_test.go

fix(notifications): escape markdown in user-controlled strings in email lines

2026-04-09 15:44:04 +00:00

notifications.go

fix(notifications): escape markdown in user-controlled strings in email lines

2026-04-09 15:44:04 +00:00

oauth_codes.go

feat: add OAuth 2.0 authorization code model and migration

2026-03-27 23:05:04 +00:00

permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

project_duplicate_test.go

fix: clear error when duplicating project with uploaded background (#1926 )

2025-12-04 10:16:16 +01:00

project_duplicate.go

refactor(files): derive attachment size from content in sibling callers

2026-04-09 16:22:56 +00:00

project_permissions_multiple_teams_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

project_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_repair_test.go

feat: add repair-projects CLI command

2026-02-25 11:56:25 +01:00

project_repair.go

feat: add repair-projects CLI command

2026-02-25 11:56:25 +01:00

project_team_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_team_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

project_team.go

fix(events): defer event dispatch for project operations

2026-03-03 12:46:34 +01:00

project_test.go

test(project): pin archived propagation aggregation in ReadAll CTE

2026-04-11 17:20:53 +00:00

project_users_permissions_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

project_users_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_users_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

project_users.go

refactor(user): export IsErrUserStatusError for use across packages

2026-03-23 12:06:16 +00:00

project_view_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_view.go

fix(views): assign default position when creating new project views

2026-03-02 08:35:35 +01:00

project.go

fix(project): replace CAST(... AS int) with CASE WHEN for MySQL 8 compat

2026-04-11 17:20:53 +00:00

reaction_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

reaction_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

reaction.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

saved_filter_positions_test.go

refactor: use per-view IN clause for filter task deletion instead of batching

2026-04-09 07:25:57 +00:00

saved_filters_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

saved_filters_test.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

saved_filters.go

refactor: use per-view IN clause for filter task deletion instead of batching

2026-04-09 07:25:57 +00:00

sessions_permissions.go

feat: add Session model with CRUD, permissions, and cleanup cron

2026-02-25 10:30:25 +01:00

sessions.go

fix: commit transaction in session cleanup cron

2026-02-25 11:03:02 +01:00

setup_tests.go

feat: add OAuth 2.0 authorization code model and migration

2026-03-27 23:05:04 +00:00

subscription_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

subscription_test.go

fix: prevent session leaks and visibility issues in model tests

2026-02-25 11:03:02 +01:00

subscription.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

task_assignees_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

task_assignees.go

fix(events): defer event dispatch for task sub-entities

2026-03-03 12:46:34 +01:00

task_attachment_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

task_attachment_test.go

fix(files): derive file size from reader at creation boundary

2026-04-09 16:22:56 +00:00

task_attachment.go

fix: use RememberValue for task attachment preview cache

2026-04-08 08:56:22 +00:00

task_collection_filter_test.go

fix(filter): recover from datemath panic on malformed date filter values

2026-02-26 16:09:13 +01:00

task_collection_filter.go

fix(filter): recover from datemath panic on malformed date filter values

2026-02-26 16:09:13 +01:00

task_collection_sort_test.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

task_collection_sort.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

task_collection_test.go

feat(tasks): enforce unique (project_id, index) via migration

2026-04-11 20:44:28 +00:00

task_collection.go

fix(tasks): support both expand and expand[] query parameter formats (#2415 )

2026-03-19 09:18:11 +00:00

task_comment_permissions.go

fix(sharing): make editing link share comments work

2025-10-09 10:53:18 +02:00

task_comments_test.go

test: update event assertions to work with deferred dispatch

2026-03-03 12:46:34 +01:00

task_comments.go

docs: correct task comment endpoint description and title (#2498 )

2026-03-29 00:43:58 +01:00

task_duplicate_test.go

feat: add task duplicate backend model and tests

2026-03-04 17:20:26 +01:00

task_duplicate.go

refactor(files): derive attachment size from content in sibling callers

2026-04-09 16:22:56 +00:00

task_overdue_reminder_test.go

feat: extend WebhookListener for user-level webhooks

2026-03-08 19:45:53 +01:00

task_overdue_reminder.go

feat: extend WebhookListener for user-level webhooks

2026-03-08 19:45:53 +01:00

task_position_test.go

fix: catch ErrNeedsFullRecalculation in task creation position conflict resolution

2026-04-09 07:25:57 +00:00

task_position.go

fix: catch ErrNeedsFullRecalculation in task creation position conflict resolution

2026-04-09 07:25:57 +00:00

task_relation_authz_test.go

fix: use recursive CTE in accessibleProjectIDsSubquery for inherited project permissions

2026-04-05 12:20:35 +00:00

task_relation_permissions.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

task_relation_test.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

task_relation.go

fix(events): defer event dispatch for task sub-entities

2026-03-03 12:46:34 +01:00

task_reminder_test.go

feat: extend WebhookListener for user-level webhooks

2026-03-08 19:45:53 +01:00

task_reminder.go

feat: extend WebhookListener for user-level webhooks

2026-03-08 19:45:53 +01:00

task_search_bench_test.go

refactor: remove typesense support

2026-02-25 12:15:28 +01:00

task_search_test.go

fix(kanban): make bucket query fixed per-view (#1007 )

2025-06-25 11:38:24 +00:00

task_search.go

fix(tasks): include tasks with deleted parents in subtask-expanded queries

2026-04-02 16:30:23 +00:00

task_unread_statuses.go

feat: task unread tracking (#1857 )

2025-11-27 15:14:42 +01:00

tasks_permissions.go

feat(tasks): add GetTaskByProjectAndIndex resolver

2026-04-11 20:44:28 +00:00

tasks_test.go

feat(tasks): enforce unique (project_id, index) via migration

2026-04-11 20:44:28 +00:00

tasks.go

feat(tasks): enforce unique (project_id, index) via migration

2026-04-11 20:44:28 +00:00

team_members_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

team_members_test.go

fix: cleanup team memberships, assignments and subscriptions when users lose access to a project

2025-10-09 13:33:27 +02:00

team_members.go

refactor(user): export IsErrUserStatusError for use across packages

2026-03-23 12:06:16 +00:00

team_sync.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

teams_permissions_test.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

teams_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

teams_test.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

teams.go

fix(events): defer event dispatch for team operations

2026-03-03 12:46:34 +01:00

unsplash.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

user_delete_test.go

refactor(projects): use getAllProjectsForUser in getProjectsToDelete (#2616 )

2026-04-13 12:32:32 +02:00

user_delete.go

refactor(projects): use getAllProjectsForUser in getProjectsToDelete (#2616 )

2026-04-13 12:32:32 +02:00

user_list_test.go

test(admin): add webtests for /admin/* endpoints and share bypass

2026-04-20 18:55:06 +00:00

user_project_test.go

feat: show user export status in settings (#1200 )

2025-07-30 15:50:26 +00:00

user_project.go

feat!: rename right to permission (#1277 )

2025-08-13 11:05:05 +02:00

users.go

fix: correct license header references (#882 )

2025-06-10 12:18:38 +02:00

webhooks_permissions.go

feat: add user_id to webhooks and user-directed event infrastructure

2026-03-08 19:45:53 +01:00

webhooks.go

fix(webhook): return error from sendWebhookPayload on non-2xx responses

2026-04-09 09:26:04 +00:00