kolaente 78bb1213f7 test(projects): cover the parent owner on member-created subprojects ...

The scenario reported in #3574: a write member creates a subproject under a
project someone else owns. The parent's owner keeps admin on it, and CanRead,
IsAdmin and expand=permissions must all agree, for a direct share and a team
share alike. Both directions are covered — an unrelated user gets neither read
nor admin and does not see the subprojects listed, and a write member is not
reported as admin on the parent.

2026-08-28 23:49:27 +02:00

..

audit

feat(audit): audit full personal data export requests

2026-07-28 18:05:34 +02:00

caldav

fix(caldav): report completion status from Done instead of done_at

2026-07-30 11:32:24 +02:00

caldavtests

fix(caldav): don't duplicate a task when a client PUTs a stale href

2026-08-18 12:55:13 +02:00

cmd

…

config

fix(ratelimit): give session renewal its own budget

2026-08-18 14:01:06 +02:00

cron

…

db

fix(labels): let bots use labels created by their owner (#3609)

2026-08-27 21:55:14 +02:00

doctor

feat: report ParadeDB extension and index status in doctor command

2026-08-05 19:27:12 +02:00

e2etests

fix(e2etests): drain pending event handlers before seeding fixtures

2026-08-27 13:36:08 +02:00

events

fix(events): don't log event payloads in the poison queue handler

2026-08-20 08:45:42 +02:00

files

fix: use caller's session in LoadFileMetaByID to prevent connection pool deadlock

2026-08-16 17:57:52 +02:00

health

…

i18n

feat(notifications): notify subscribers when a task is created

2026-08-27 15:41:58 +02:00

initialize

feat(auth): add OpenID provider availability monitoring and retry logic (#3145)

2026-07-10 17:52:01 +02:00

license

fix(license): refuse redirects and use the SSRF-safe http client for checks

2026-07-28 17:26:12 +02:00

log

…

mail

fix(user): keep old email active until new one is confirmed

2026-08-18 22:03:38 +02:00

metrics

fix(metrics): store active users as TTL keys in keyvalue to avoid concurrent map access

2026-08-19 17:29:35 +02:00

migration

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

models

test(projects): cover the parent owner on member-created subprojects

2026-08-28 23:49:27 +02:00

modules

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

notifications

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

plugins

fix(plugins): exclude example plugin from module build

2026-08-20 16:51:01 +02:00

red

…

richtext

fix(deps): update module github.com/yuin/goldmark to v2 (#3627)

2026-08-27 20:34:29 +00:00

routes

fix(projects): report null for a max_permission nobody computed

2026-08-28 23:49:27 +02:00

swagger

[skip ci] Updated swagger docs

2026-08-19 00:53:08 +00:00

user

fix(user): expire used TOTP passcodes via keyvalue TTL

2026-08-19 17:29:35 +02:00

utils

feat(migration): client-aware get and size-limited download helpers, bounded json decode

2026-08-20 08:45:42 +02:00

version

…

web

fix(web): stop logging the full auth object on permission denials

2026-07-29 07:58:17 +00:00

websocket

fix(notifications): check project access when reading notifications

2026-07-29 07:58:17 +00:00

webtests

fix(projects): report null for a max_permission nobody computed

2026-08-28 23:49:27 +02:00

yaegi_symbols

[skip ci] Updated yaegi symbols

2026-08-27 16:46:50 +00:00