Commit Graph

7 Commits

Author SHA1 Message Date
Torsten Schulz (local)
d32f6eaf1c Update role-based access control for user management in CMS
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 44s
This commit modifies the navigation and CMS user management components to allow access for both 'admin' and 'vorstand' roles. The changes include updating the conditional rendering logic in the Navigation and index.vue files, as well as adjusting the API endpoint to reflect the new role permissions, enhancing the flexibility of user access within the CMS.
2026-02-06 10:35:13 +01:00
Torsten Schulz (local)
8045542f8f Enhance user contact data visibility based on role permissions
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 52s
This commit introduces role-based access control for user contact information in the CMS. It updates the user list display to show email and phone details only to users with the 'vorstand' role, while masking this information for others. Additionally, it modifies the API endpoints to ensure that contact data is only returned for authorized users, improving data privacy and security.
2026-02-06 10:12:37 +01:00
Torsten Schulz (local)
673c34ac9d Update Apache SSL configuration and enhance security features across multiple files. Changed X-Frame-Options to SAMEORIGIN for better security, added optional Content Security Policy headers for testing, and improved password handling with HaveIBeenPwned checks during user registration and password reset. Implemented passkey login functionality in the authentication flow, including UI updates for user experience. Enhanced image upload processing with size limits and validation, and added rate limiting for various API endpoints to prevent abuse.
Some checks failed
Code Analysis (JS/Vue) / analyze (push) Failing after 51s
2026-01-05 11:50:57 +01:00
Torsten Schulz (local)
435e28fd55 Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints. 2025-12-19 09:51:28 +01:00
Torsten Schulz (local)
680629e1f8 Add dotenv package for environment variable management and refactor SMTP credential handling in email services. Enhance error handling for missing SMTP credentials across various API endpoints to improve reliability and maintainability. 2025-12-18 12:19:23 +01:00
Torsten Schulz (local)
bde1d32b14 Update dependencies in package.json and package-lock.json; add testing scripts for Vitest, and include new packages such as supertest and vitest. Refactor Navigation component to improve event handling and cleanup, ensuring better performance and user experience. Enhance error handling in various API endpoints for PDF uploads and CSV saves, ensuring robust error propagation. Update nodemailer transport configuration for consistency across API handlers. 2025-11-10 13:08:50 +01:00
Torsten Schulz (local)
96ff9e5d44 Add user management system with approval workflow and role assignment 2025-10-21 11:35:02 +02:00