177 Commits

Author SHA1 Message Date
DariusIII 697cdc84c1 Update user cleanup 2026-08-27 00:09:53 +02:00
DariusIII c74456bdf1 Fix URL 2026-08-20 10:59:26 +02:00
DariusIII b49a0cd4d7 Update for legacy guids 2026-08-14 14:05:48 +02:00
DariusIII b04a8c5992 Fix chunk usage 2026-08-14 13:50:48 +02:00
DariusIII 931fc55d8a Update migrations 2026-08-14 12:43:33 +02:00
DariusIII 28e54ee56c Merge remote-tracking branch 'origin' into releases_refactor 2026-08-14 10:57:57 +02:00
DariusIII 3bc94520f8 Update bulk inserts handling 2026-08-14 10:50:56 +02:00
DariusIII 79e7736c4c Refactor releases table 2026-08-14 08:46:01 +02:00
DariusIII 992a0007f6 Improve book matching 2026-08-13 15:53:31 +02:00
DariusIII 9af6ba1df5 Cleanup code and extra files 2026-08-13 14:24:02 +02:00
DariusIII 06e541c1a7 Add missing data to anidb list page 2026-08-11 23:47:40 +02:00
DariusIII 94b2275eac Fix issue in anidb edit page 2026-08-11 23:22:03 +02:00
DariusIII c85ee543c5 Fix tv seasons categorization 2026-08-11 12:35:48 +02:00
DariusIII 45c766d217 Merge branch 'master' of https://github.com/NNTmux/newznab-tmux 2026-08-11 10:53:59 +02:00
DariusIII 014077b514 Refactor additional postprocessing 2026-08-11 10:43:22 +02:00
DariusIII c2acf11167 Use MB/GB for size settings in views 2026-08-10 20:12:00 +02:00
DariusIII f1912e5e74 Fix views inconsistencies 2026-08-09 14:37:39 +02:00
DariusIII 17309315b8 Fix restore and verify buttons in admin user list 2026-08-08 12:36:56 +02:00
DariusIII 0800786471 Fix issue preventing schema import. Closes #1866 2026-08-07 11:03:37 +02:00
DariusIII 94b14596d7 Fix issue with sizes 2026-08-04 15:23:41 +02:00
DariusIII fbf036598a Update to latest tmux pane handling 2026-08-04 11:51:35 +02:00
DariusIII a10aae7f05 Update namefixing 2026-08-04 08:49:07 +02:00
DariusIII d384f3d60d Update additional postprocessing 2026-08-04 01:00:24 +02:00
DariusIII f0a7e1a017 Update cbp handling 2026-08-03 16:48:25 +02:00
DariusIII e9e23c5027 Update API category display code 2026-08-02 23:58:52 +02:00
DariusIII 7906148f7f Update dashboard widgets 2026-07-20 13:07:56 +02:00
DariusIII b27fb8d86b Make webp default format for images 2026-07-16 15:57:20 +02:00
DariusIII 6009a4edb8 Update remove crap 2026-07-15 15:01:18 +02:00
DariusIII de005d3e7e Update nzb and nfo import 2026-07-14 20:18:04 +02:00
DariusIII 567a614a02 Update APIv2 endpoints 2026-07-14 16:49:15 +02:00
DariusIII efd52fb1d8 Improve search handling in manticore and elasticsearch 2026-07-14 16:10:02 +02:00
DariusIII 92b1c39613 Update API and APIv2 handling 2026-07-14 12:32:04 +02:00
DariusIII 5ee33502b1 Update nzb creation 2026-07-13 16:51:10 +02:00
DariusIII 0eae1a7ca9 Harden 2FA 2026-07-13 13:07:17 +02:00
DariusIII b5b6841eca Update admin area views and controllers 2026-07-13 11:36:42 +02:00
DariusIII 645eba20e2 Update additional PP 2026-07-12 16:30:39 +02:00
DariusIII 1e6c6f5193 Update APIv2 controller 2026-07-12 12:03:34 +02:00
DariusIII 01ee665a24 Update APIv2 speed 2026-07-12 11:06:31 +02:00
DariusIII 138c0bfc30 Fix remember me behavior 2026-07-12 09:46:19 +02:00
DariusIII a3a6fd8e4a Add missing files 2026-07-11 12:05:47 +02:00
DariusIII 60c85e2e63 Add tests 2026-07-11 10:04:38 +02:00
DariusIII ccb79f13b9 Update API handling 2026-07-11 10:00:01 +02:00
DariusIII f6c18cdeac Update views and related controllers 2026-07-10 21:31:19 +02:00
DariusIII 81d60db201 Add test 2026-07-10 16:31:59 +02:00
DariusIII 06379f25cb Revert "Fix getCategoryExclusionById() excluding every category for role-only users" 2026-07-09 08:14:18 +02:00
joemeyer76 e62724f2cd Fix getCategoryExclusionById() excluding every category for role-only users
RolesAndPermissionsSeeder grants every 'view *' permission via
Role::givePermissionTo() only -- it never grants permissions directly to a
user with User::givePermissionTo(). That is true for every seeded role,
including Admin.

User::getCategoryExclusionById() computed the allowed permission set as:

    $userAllowed = $user->getDirectPermissions()->pluck('name')->toArray();
    $roleAllowed = $user->getAllPermissions()->pluck('name')->toArray();
    $allowed = array_intersect($roleAllowed, $userAllowed);

getAllPermissions() already includes permissions granted via the user's
role(s), so intersecting it with getDirectPermissions() (permissions
assigned directly to the user, bypassing roles) means $allowed is empty
for any user whose permissions come only from their role. Since every
seeded role works this way, this silently excluded every category root
for every user on a fresh install, and any subsequent Newznab/Torznab API
search or browse request returned zero results with no visible error.

Fix: use getAllPermissions() directly, since it already reflects both
role-granted and directly-granted permissions.

Added a regression test (test_role_only_permissions_are_not_excluded)
that mirrors the real seeder setup -- role-only permissions, nothing
granted directly to the user -- to make sure this doesn't regress.
2026-07-03 18:18:46 -04:00
DariusIII 7b5313e97e Update detection 2026-07-02 11:43:08 +02:00
DariusIII 3faeb1d63a Fix blocking issue 2026-07-01 14:44:16 +02:00
DariusIII 0790d2290c Hide sensitive info from log 2026-06-30 19:05:15 +02:00
copilot-swe-agent[bot] 3af1b15f48 fix: add missing array $headers parameter to output() overrides in tests 2026-06-28 19:19:04 +00:00