Graham McIntire
dd13a5f2a5
1. Prevent user_id impersonation in contact submissions - Remove user_id from submission_changeset cast fields - Pass user_id as a separate server-side argument to create_contact/2 - Client form params can no longer forge account-linked contacts 2. Restrict flag toggle to admins only - Add admin? guard to toggle_flag event handler - Hide flag button from non-admin users in template 3. Reset enrichment on timestamp edits - Add qso_timestamp to the fields that trigger enrichment reset - Prevents stale weather/HRRR/IEMRE data after time changes |
||
|---|---|---|
| .. | ||
| admin | ||
| beacon_live | ||
| contact_live | ||
| user_management_live | ||
| about_live.ex | ||
| algo_live.ex | ||
| backfill_live.ex | ||
| contact_map_live.ex | ||
| map_live.ex | ||
| path_live.ex | ||
| privacy_live.ex | ||
| rover_live.ex | ||
| submit_live.ex | ||
| weather_map_live.ex | ||