towerops/lib/towerops/organizations
Graham McIntire 3a408a8dc1 Security hardening + performance fixes across codebase
CRITICAL:
- Membership: remove :role/:org_id/:user_id from mass-assignment cast; use explicit create_changeset/4 and role_update_changeset/2
- GraphQL member resolver: add authorize_invite/3 checking admin/owner role and role hierarchy
- REST invitations controller: add auth check for invite creation

HIGH:
- ApiToken: remove :organization_id/:user_id from cast; use explicit create_changeset/4

MEDIUM:
- Move 8 LiveView Ecto queries into context modules (Admin, Alerts, Coverages, OnCall, Snmp)
- Replace Process.put/Process.get with socket assigns for unresolved_alert_count (user_auth + layouts + 50 templates)
- Add batch get_utilization_for_interfaces/1 to eliminate N+1 capacity queries in device show
- Replace Process.sleep with Process.monitor/assert_receive or Process.send_after in 5 test files

LOW:
- Add handle_params/3 to UserResetPasswordLive, UserRegistrationLive, StatusPageLive
- Remove redundant Repo.preload calls; add preloads to list_site_devices/1
- Fix @impl annotations and credo nesting warnings
2026-06-21 17:40:50 -05:00
..
invitation.ex Major codebase cleanup: DRY schemas, remove dead config, consolidate modules 2026-06-16 15:29:22 -05:00
invitation_query.ex refactor: extract per-schema Query modules for organization_id filters 2026-04-30 14:26:30 -05:00
membership.ex Security hardening + performance fixes across codebase 2026-06-21 17:40:50 -05:00
membership_query.ex refactor: extract per-schema Query modules for organization_id filters 2026-04-30 14:26:30 -05:00
organization.ex Major codebase cleanup: DRY schemas, remove dead config, consolidate modules 2026-06-16 15:29:22 -05:00
policy.ex Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00
subscription_limits.ex Fix failing tests and clean up code 2026-06-16 14:54:34 -05:00