kolaente 0eb39fae9a fix(events): handle nil auth when building event doers ...

ProjectUser.Create and friends are called with a nil auth in tests;
the old interface-typed Doer just serialized as null, so a nil doer
keeps that behavior (and maps to the system actor in the audit entry).

2026-06-12 08:56:08 +00:00

..

admin_bypass_test.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

admin_bypass.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

admin_overview.go

refactor(admin): extract shared admin overview, user-create and user-view helpers

2026-06-11 19:32:42 +00:00

admin_project_list.go

feat(admin): add users/projects list endpoints and is_admin patch

2026-04-20 18:55:06 +00:00

admin_user_actions.go

refactor(admin): share user-mutation logic between v1 and v2

2026-06-11 19:32:42 +00:00

admin_user_create.go

refactor(admin): extract shared admin overview, user-create and user-view helpers

2026-06-11 19:32:42 +00:00

api_routes_test.go

fix(api/v2): expose v2-only token route groups via the routes endpoint

2026-06-08 13:54:09 +00:00

api_routes.go

fix(api/v2): expose v2-only token route groups via the routes endpoint

2026-06-08 13:54:09 +00:00

api_tokens_expiry_cron_test.go

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

api_tokens_expiry_cron.go

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

api_tokens_expiry_notification_test.go

test: add tests for API token expiry notifications and cron

2026-03-30 12:28:15 +00:00

api_tokens_expiry_notification.go

feat: add Atom feed for user notifications with API token auth (#2758)

2026-05-15 17:25:09 +02:00

api_tokens_permissions.go

feat(api): bot token support via /tokens CRUD and bot_users_enabled flag

2026-05-01 14:44:10 +00:00

api_tokens_test.go

feat: add Atom feed for user notifications with API token auth (#2758)

2026-05-15 17:25:09 +02:00

api_tokens.go

feat(events): add auth boundary events

2026-06-12 08:56:08 +00:00

bot_users_permissions.go

feat(models): add BotUser CRUD wrapper

2026-05-01 14:44:10 +00:00

bot_users_test.go

feat(models): add BotUser CRUD wrapper

2026-05-01 14:44:10 +00:00

bot_users.go

feat(api/v2): add bot user CRUD on /api/v2

2026-06-05 08:51:39 +00:00

bulk_task_test.go

…

bulk_task.go

docs(api/v2): tag bulk task fields for the v2 schema

2026-06-09 20:13:02 +00:00

comment_quotes_test.go

feat(comments): treat quoted comment authors as implicit mentions

2026-05-20 21:02:14 +00:00

comment_quotes.go

feat(comments): treat quoted comment authors as implicit mentions

2026-05-20 21:02:14 +00:00

error.go

fix(time-tracking): reject inverted time-entry intervals

2026-06-08 13:54:09 +00:00

events.go

refactor(events): use a concrete doer on project and team events

2026-06-12 08:56:08 +00:00

export.go

chore(lint): suppress known gosec false positives

2026-03-23 16:23:15 +01:00

favorites.go

…

kanban_permissions.go

…

kanban_task_bucket_test.go

test(kanban): add failing test for repeating task bucket routing on done (#2573)

2026-04-09 10:45:34 +00:00

kanban_task_bucket.go

docs(api/v2): tag task bucket fields for the v2 schema

2026-06-09 20:01:20 +00:00

kanban_test.go

…

kanban.go

…

label_permissions.go

feat(labels): let bot owners manage labels created by their bots

2026-06-09 11:40:04 +00:00

label_task_permissions.go

…

label_task_test.go

…

label_task.go

docs(api/v2): tag bulk label fields for the v2 schema

2026-06-10 11:56:05 +02:00

label_test.go

feat(labels): let bot owners manage labels created by their bots

2026-06-09 11:40:04 +00:00

label.go

docs(api/v2): mark server-controlled label and user fields read-only

2026-05-31 15:27:44 +02:00

link_sharing_permissions.go

fix(link-sharing): resolve share read permission via project id so by-id reads work

2026-06-05 09:17:25 +00:00

link_sharing_test.go

fix(security): validate link share JWTs against DB on every request

2026-04-09 15:38:07 +00:00

link_sharing.go

docs(api/v2): tag LinkSharing fields for the v2 schema

2026-06-05 09:17:25 +00:00

listeners.go

refactor(events): use a concrete doer on project and team events

2026-06-12 08:56:08 +00:00

main_test.go

…

mentions_test.go

…

mentions.go

…

message.go

feat(api/v2): upload user avatar via multipart

2026-06-02 11:55:25 +00:00

metrics_count_test.go

test(metrics): verify counts are read from the right table

2026-05-30 13:48:01 +00:00

models.go

test(time-tracking): cover the time_entries model

2026-06-08 13:54:09 +00:00

notifications_database.go

docs(api/v2): add doc/readOnly tags to notification model fields

2026-06-07 10:05:24 +00:00

notifications_test.go

feat: add Atom feed for user notifications with API token auth (#2758)

2026-05-15 17:25:09 +02:00

notifications.go

feat: add Atom feed for user notifications with API token auth (#2758)

2026-05-15 17:25:09 +02:00

oauth_codes.go

feat: add OAuth 2.0 authorization code model and migration

2026-03-27 23:05:04 +00:00

permissions.go

…

project_duplicate_test.go

…

project_duplicate.go

docs(api/v2): tag project duplication fields for the v2 schema

2026-06-09 20:11:43 +00:00

project_permissions_multiple_teams_test.go

…

project_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_repair_test.go

…

project_repair.go

…

project_team_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_team_test.go

…

project_team.go

fix(events): build event doers without re-fetching the user

2026-06-12 08:56:08 +00:00

project_test.go

test(project): pin archived propagation aggregation in ReadAll CTE

2026-04-11 17:20:53 +00:00

project_users_permissions_test.go

…

project_users_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_users_test.go

…

project_users.go

fix(events): build event doers without re-fetching the user

2026-06-12 08:56:08 +00:00

project_view_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

project_view.go

fix(api/v2): scope project view delete to its parent project

2026-06-01 13:04:34 +00:00

project.go

fix(events): build event doers without re-fetching the user

2026-06-12 08:56:08 +00:00

reaction_permissions.go

…

reaction_test.go

…

reaction.go

docs(api/v2): tag reaction fields for the v2 schema

2026-06-09 21:34:22 +00:00

saved_filter_positions_test.go

refactor: use per-view IN clause for filter task deletion instead of batching

2026-04-09 07:25:57 +00:00

saved_filters_permissions.go

…

saved_filters_test.go

…

saved_filters.go

docs(api/v2): tag SavedFilter fields for the v2 schema

2026-06-07 10:40:20 +00:00

sessions_permissions.go

…

sessions.go

docs(models): add doc and readOnly tags to Session fields for v2

2026-06-05 08:21:48 +00:00

setup_tests.go

test(time-tracking): cover the time_entries model

2026-06-08 13:54:09 +00:00

subscription_permissions.go

…

subscription_test.go

…

subscription.go

feat(api/v2): add subscribe/unsubscribe on /api/v2

2026-06-07 09:57:51 +00:00

task_assignees_permissions.go

…

task_assignees.go

docs(api/v2): tag bulk assignee fields for the v2 schema

2026-06-09 19:42:16 +00:00

task_attachment_permissions.go

…

task_attachment_test.go

fix(files): derive file size from reader at creation boundary

2026-04-09 16:22:56 +00:00

task_attachment.go

docs(api/v2): tag task attachment fields for the v2 schema

2026-06-10 10:22:39 +00:00

task_collection_filter_test.go

…

task_collection_filter.go

refactor: extract preprocessFilterString from task filter parsing

2026-06-08 13:54:09 +00:00

task_collection_sort_test.go

…

task_collection_sort.go

…

task_collection_test.go

feat(projects): always store identifiers as uppercase (#2775)

2026-05-19 10:35:43 +02:00

task_collection.go

feat(models): let TaskCollection force a flat task list

2026-06-11 18:31:03 +00:00

task_comment_permissions.go

…

task_comments_test.go

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

task_comments.go

docs(task-comments): trim comments to the non-obvious why

2026-06-03 19:57:26 +00:00

task_duplicate_test.go

…

task_duplicate.go

feat(api/v2): add task duplicate action (#2815)

2026-06-01 14:13:39 +02:00

task_overdue_reminder_test.go

…

task_overdue_reminder.go

…

task_position_test.go

fix: catch ErrNeedsFullRecalculation in task creation position conflict resolution

2026-04-09 07:25:57 +00:00

task_position.go

docs(api/v2): tag task position fields for the v2 schema

2026-06-10 11:55:51 +02:00

task_relation_authz_test.go

fix: use recursive CTE in accessibleProjectIDsSubquery for inherited project permissions

2026-04-05 12:20:35 +00:00

task_relation_permissions.go

…

task_relation_test.go

…

task_relation.go

docs(api/v2): tag task relation fields for the v2 schema

2026-06-09 20:42:00 +00:00

task_reminder_test.go

…

task_reminder.go

…

task_search_bench_test.go

…

task_search_test.go

…

task_search.go

fix(tasks): include tasks with deleted parents in subtask-expanded queries

2026-04-02 16:30:23 +00:00

task_unread_statuses.go

…

tasks_permissions.go

refactor(models): remove *Arr helper fields now handled by normalizer

2026-05-31 12:56:57 +00:00

tasks_test.go

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

tasks.go

docs(api/v2): tag task fields for the v2 schema

2026-06-10 10:12:09 +00:00

team_members_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

team_members_test.go

…

team_members.go

feat(api/v2): add team members (add/remove/admin-toggle) on /api/v2

2026-06-07 10:48:23 +00:00

team_sync.go

…

teams_permissions_test.go

…

teams_permissions.go

feat(permissions): site admins bypass all Can* checks (license-gated)

2026-04-20 18:55:06 +00:00

teams_test.go

…

teams.go

fix(events): build event doers without re-fetching the user

2026-06-12 08:56:08 +00:00

time_tracking_filter.go

feat(time-tracking): filter time entries with the task DSL

2026-06-08 13:54:09 +00:00

time_tracking_test.go

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

time_tracking.go

fix(time-tracking): reject inverted time-entry intervals

2026-06-08 13:54:09 +00:00

unsplash.go

…

user_delete_test.go

fix(models): allow user-delete cascade to complete for disabled creators

2026-05-06 16:08:16 +02:00

user_delete.go

feat(models): add BotUser CRUD wrapper

2026-05-01 14:44:10 +00:00

user_list_test.go

feat(user): always include own bots in user search

2026-05-01 14:44:10 +00:00

user_project_test.go

…

user_project.go

refactor(user): share user-search logic between v1 and v2

2026-06-11 20:07:43 +00:00

user_settings.go

feat(audit): attribute failed logins to the originating request

2026-06-12 08:56:08 +00:00

users.go

fix(events): handle nil auth when building event doers

2026-06-12 08:56:08 +00:00

webhooks_permissions.go

…

webhooks.go

feat(api/v2): add user webhooks on /api/v2

2026-06-10 19:12:41 +00:00