mirror of
https://github.com/fsolla/teqo.git
synced 2026-11-13 15:13:07 +00:00
29ed733190
createCalendarFeedLinkRecord failed with `overrideAccess:false` + `user: campaignUser` because Payload stripped the required `secretSlug`/`createdBy` fields (create access was admin-only) -> 400 behind the generic message; revokeCalendarFeedRecord silently no-opped (revokedAt update access also admin-only). - canCreateCalendarFeed now enforces advisor filterMunicipality scope on data (canCreateSupporter precedent) + canSetCalendarFeedSecret / canSetCalendarFeedRevocation permit staff to mint the secret on create and mark a feed revoked; secret read stays `() => false` and update admin-only. - CalendarFeed stamps createdBy via stampCampaignCreatedBy; secret create + revokedAt update use the new staff field accesses. - Action refactored to `*Record` (payload, actor) cores + thin wrappers; assertFilterMunicipalityInScope (tour precedent); console.error keeps the real error on the server while the friendly message stays. - 10 int tests for create/scope/revoke/leader/secret; fixture tracks calendarFeed cleanup. Closes #436 |
||
|---|---|---|
| .. | ||
| design-refs | ||
| plans | ||
| research | ||
| AGENT-OPS.md | ||
| ARCHITECTURE.md | ||
| CHANGELOG-AGENTS.md | ||
| CUSTOMER.md | ||
| CUTOVER-MAIN-ONLY.md | ||
| GUARDRAILS.md | ||
| IMPROVE-APP-PLAN.md | ||
| IMPROVE-CODE-QUALITY-PLAN.md | ||
| PAYLOAD-REFERENCE.md | ||
| roadmap.md | ||
| TECH-DEBT.md | ||
| TESTING.md | ||