Security check list #61

New issue

Closed

opened 2023-08-01 23:53:31 +02:00 by hansegucker · 7 comments

hansegucker commented 2023-08-01 23:53:31 +02:00

Owner

Copy link

• All fields are named explicitly within schemas
• All types and mutations have permissions
• Related attributes have according permissions (foreign key and m2m)
• All views have permissions

- [x] All fields are named explicitly within schemas - [x] All types and mutations have permissions - [x] Related attributes have according permissions (foreign key and m2m) - [x] All views have permissions

hansegucker commented 2023-08-02 11:14:54 +02:00

Author

Owner

Copy link

marked the checklist item All views have permissions as completed

marked the checklist item **All views have permissions** as completed

hansegucker commented 2023-08-02 11:14:55 +02:00

Author

Owner

Copy link

marked the checklist item Related attributes have according permissions (foreign key and m2m) as completed

marked the checklist item **Related attributes have according permissions (foreign key and m2m)** as completed

hansegucker commented 2023-08-02 11:14:55 +02:00

Author

Owner

Copy link

marked the checklist item All types and mutations have permissions as completed

marked the checklist item **All types and mutations have permissions** as completed

hansegucker commented 2023-08-02 11:14:57 +02:00

Author

Owner

Copy link

marked the checklist item All fields are named explicitly within schemas as completed

marked the checklist item **All fields are named explicitly within schemas** as completed

hansegucker commented 2023-08-02 11:14:59 +02:00

Author

Owner

Copy link

assigned to @hansegucker

assigned to @hansegucker

hansegucker commented 2023-08-02 11:15:00 +02:00

Author

Owner

Copy link

created branch 61-security-check-list to address this issue

created branch [`61-security-check-list`](/AlekSIS/onboarding/AlekSIS-App-Plank/-/compare/master...61-security-check-list) to address this issue

hansegucker commented 2023-08-02 11:15:04 +02:00

Author

Owner

Copy link

mentioned in merge request !192

mentioned in merge request !192

hansegucker closed this issue 2023-08-02 11:43:56 +02:00

Sign in to join this conversation.

No Branch/Tag specified

Branches Tags

master

weblate-frontend

weblate

fix/check-out

check/update-pyproject-toml

check/update-prettier-ignore

check/update-tox-ini

patch-ticdesk

check/update-builddeps-package-json

check/update-eslint-rc-js

71-personal-inventories-or-individual-owners-in-inventories

1.0.0

1.0.0b0

0.2.0.dev1

0.2.0.dev0

0.1

Labels

Clear labels   

Security

  

TeX

Needs LaTeX template

  

auto-update

  

board

done

  

board

ready

  

board

todo

  

bug

  

check

delete-eslint-rc-js

  

check

update-builddeps-package-json

  

check

update-eslint-rc-js

  

check

update-gitignore

  

check

update-merge-request-template

  

check

update-prettier-ignore

  

check

update-pyproject-toml

  

check

update-renovate-json

  

check

update-tox-ini

  

dependencies

  

duplicate

  

enhancement

  

good first issue

  

help wanted

  

invalid

  

part

backend

Backend (view code, models, logic, etc.)

  

part

ci

  

part

docs

Issue or addition to the documentation

  

part

frontend

Frontend (templates, etc.)

  

part

i18n

Translation or internationalisation issue

  

part

non-technical

Non-technical (policy, maintenance, etc.) issue or discussion

  

part

packaging

Issue concerning the packaging of AlekSIS and components

  

prio

1

Priority High

  

prio

2

Priority Medium

  

prio

3

Priority Low

  

question

  

release-mr-5.x

  

size

large

  

size

medium

  

size

small

  

source

customer

Requested by a customer or affiliated user

  

source

customer::fsmw

  

source

customer::fss

  

source

customer::teckids

  

source

downstream

Issue or merge request from other projects using AlekSIS or parts of it

  

type

breaking

  

type

bug

Bug

  

type

feature

New feature

  

type

refactoring

  

wontfix

  

workflow

blocked

Issue is blocked by another issue

  

workflow

confirmed

The bug is reproducible and will be fixed

  

workflow

current-todo

  

workflow

discussing

Needs to be discussed before implementation

  

workflow

new-app

Requires new AlekSIS app, which has to be created

  

workflow

wontfix

The bug is not reproducible or the feature was decided against

No labels

Security

TeX

auto-update

board

done

board

ready

board

todo

bug

check

delete-eslint-rc-js

check

update-builddeps-package-json

check

update-eslint-rc-js

check

update-gitignore

check

update-merge-request-template

check

update-prettier-ignore

check

update-pyproject-toml

check

update-renovate-json

check

update-tox-ini

dependencies

duplicate

enhancement

good first issue

help wanted

invalid

part

backend

part

ci

part

docs

part

frontend

part

i18n

part

non-technical

part

packaging

prio

1

prio

2

prio

3

question

release-mr-5.x

size

large

size

medium

size

small

source

customer

source

customer::fsmw

source

customer::fss

source

customer::teckids

source

downstream

type

breaking

type

bug

type

feature

type

refactoring

wontfix

workflow

blocked

workflow

confirmed

workflow

current-todo

workflow

discussing

workflow

new-app

workflow

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

hansegucker

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

aleksis/AlekSIS-App-Plank#61

No description provided.