towerops/lib/towerops_web/live/admin
Graham McIntire 3a408a8dc1 Security hardening + performance fixes across codebase
CRITICAL:
- Membership: remove :role/:org_id/:user_id from mass-assignment cast; use explicit create_changeset/4 and role_update_changeset/2
- GraphQL member resolver: add authorize_invite/3 checking admin/owner role and role hierarchy
- REST invitations controller: add auth check for invite creation

HIGH:
- ApiToken: remove :organization_id/:user_id from cast; use explicit create_changeset/4

MEDIUM:
- Move 8 LiveView Ecto queries into context modules (Admin, Alerts, Coverages, OnCall, Snmp)
- Replace Process.put/Process.get with socket assigns for unresolved_alert_count (user_auth + layouts + 50 templates)
- Add batch get_utilization_for_interfaces/1 to eliminate N+1 capacity queries in device show
- Replace Process.sleep with Process.monitor/assert_receive or Process.send_after in 5 test files

LOW:
- Add handle_params/3 to UserResetPasswordLive, UserRegistrationLive, StatusPageLive
- Remove redundant Repo.preload calls; add preloads to list_site_devices/1
- Fix @impl annotations and credo nesting warnings
2026-06-21 17:40:50 -05:00
..
agent_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
audit_live credo fixes 2026-06-13 18:24:06 -05:00
org_live Security hardening + performance fixes across codebase 2026-06-21 17:40:50 -05:00
security_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
user_live fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
dashboard_live.ex fix: M3, M6, M7, M12 — open redirect, overfetch, missing constraint, admin defense-in-depth 2026-05-12 12:46:16 -05:00
dashboard_live.html.heex rename "Admin Dashboard" to "Dashboard" 2026-03-10 13:36:03 -05:00
monitoring_live.ex credo fixes 2026-06-14 08:27:57 -05:00
monitoring_live.html.heex i18n: wrap all user-facing strings in gettext() 2026-02-14 17:44:01 -06:00