robbond
8b045ab781
fix(security): enforce ownership across appeal completion
2026-11-05 13:28:43 +00:00
robbond
fc960f907f
fix(security): enforce ownership on private draft blob deletion
2026-11-05 13:04:09 +00:00
robbond
056dace563
fix(security): enforce ownership on draft blob listing proxy
2026-11-05 12:59:55 +00:00
robbond
9d6d3b9f71
fix(security): enforce ownership on appeal and representation blob proxies
2026-11-05 12:53:24 +00:00
robbond
0a115a8808
security: preserve representation history in watched-case upsert
2026-11-05 12:48:45 +00:00
robbond
431c45ba2b
security: enforce CRM watched-case deletion ownership
2026-11-05 10:24:52 +00:00
robbond
eeb4a1f441
fix: restore watched-case deletion through subscriptions facade
2026-11-05 10:02:30 +00:00
robbond
569faa77e5
fix(security): isolate NextAuth email provider from Nodemailer
2026-11-04 11:26:01 +00:00
robbond
16a206ae0f
fix(security): remove obsolete Swagger documentation endpoint
2026-11-04 09:17:23 +00:00
robbond
bb50b17277
fix(ithc): correct server-side session retrieval for file APIs
2026-11-03 09:25:02 +00:00
robbond
d417860d1d
Merge branch 'SIPS-Development' into feature/ithc-mitigation
2026-11-02 16:05:12 +00:00
Robert Bond
93eabe8e6d
Merged PR 2665: 25470 testing authentication handler
...
Related work items: #25470
2026-11-02 12:41:09 +00:00
robbond
65616f6307
ITHC: enforce container ownership on uploads
2026-10-27 06:05:47 +00:00
robbond
5e98d6e8c2
ITHC: enforce administrative case deletion authorization
2026-10-27 05:40:50 +00:00
robbond
8b607d8134
ITHC: enforce representation completion ownership and admin access
2026-10-26 17:11:38 +00:00
robbond
034b59a981
ITHC: enforce representation blob proxy ownership and admin access
2026-10-26 16:17:52 +00:00
robbond
37aeb03509
ITHC: protect administrative representation unlock endpoint
2026-10-26 15:27:10 +00:00
robbond
0daeb783b9
Stage 3: enforce blob deletion ownership and add admin representation deletion
...
Also repairs two stale Phase 21 fixtures:
- Supplies a valid PDF to exercise the upload dependency-failure path.
- Injects getPersonalAccount into the representation-involvement VM fixture.
2026-10-26 14:39:22 +00:00
robbond
d11c4a868e
Add independent administrative authentication foundation
2026-10-26 12:51:42 +00:00
Robert Bond
fdeff5b898
Merged PR 2605: updated query to include consultationclosed check
...
updated query to include consultationclosed check
Related work items: #24836
2026-09-07 10:46:32 +00:00
Robert Bond
95486f0164
Merged PR 2476: added check for inactive case deadlines
...
added check for inactive case deadlines
Related work items: #24297
2026-07-15 12:41:10 +00:00
Robert Bond
e864049bec
Merged PR 2449: language helper
...
Related work items: #23754
2026-07-01 11:29:15 +00:00
Robert Bond
ff699735c7
Merged PR 2442: remove lodash dependecies on _.has
...
Related work items: #23754
2026-06-29 13:08:06 +00:00
Robert Bond
94b19f9697
Merged PR 2432: Add myportal API grouping facade read slice
...
Add myportal API grouping facade read slice
Related work items: #23754
2026-06-25 09:37:01 +00:00
Robert Bond
a1b89d19b8
Merged PR 2431: Add case details API grouping facade
...
Add case details API grouping facade
Related work items: #23754
2026-06-25 09:22:12 +00:00
Robert Bond
a266fa5428
Merged PR 2429: Add public search API grouping facade slice
...
Add public search API grouping facade slice
Related work items: #23754
2026-06-25 08:48:43 +00:00
Robert Bond
33dcb6b863
Merged PR 2428: Add documents API grouping facade slice
...
Add documents API grouping facade slice
Related work items: #23754
2026-06-25 08:24:58 +00:00
Robert Bond
153f0d679e
Merged PR 2427: update api facade
...
Related work items: #23754
2026-06-25 08:11:14 +00:00
Robert Bond
6d0bc35612
Merged PR 2420: added welsh translations of api endpoints
...
added welsh translations of api endpoints
Related work items: #23879
2026-06-23 10:38:24 +00:00
Robert Bond
d7bb1acb10
Merged PR 2414: welsh version of contact us and heading for rep heading for IP rep type
...
welsh version of contact us and heading for rep heading for IP rep type
Related work items: #23484 , #23910
2026-06-22 12:44:36 +00:00
Robert Bond
ca244e5de1
Merged PR 2392: updated project types for new sub grid
...
updated project types for new sub grid
Related work items: #23752
2026-06-16 17:44:04 +00:00
Robert Bond
c6e42fc314
Merged PR 2381: ROW case stage updates
...
Related work items: #23564 , #23779 , #23780
2026-06-10 10:12:11 +00:00
Robert Bond
18a05d4be8
Merged PR 2357: dashboards in admin for appeals and lpa
...
dashboards in admin for appeals and lpa
Related work items: #23527
2026-05-29 16:35:27 +00:00
Robert Bond
b71a93076b
Merged PR 2352: adjusted query to only show published
...
adjusted query to only show published
Related work items: #23447
2026-05-28 11:02:18 +00:00
Robert Bond
24cd7000f7
Merged PR 2350: added in count on case status dropdown
...
added in count on case status dropdown
Related work items: #23447
2026-05-28 09:02:30 +00:00
Robert Bond
b6bd543527
Merged PR 2329: welsh link for events
...
welsh link for events
Related work items: #23054
2026-05-18 08:50:58 +00:00
Robert Bond
d0b2fd077a
Merged PR 2315: Auth stabilistatiion and hardening
...
Related work items: #23020
2026-05-14 08:55:49 +00:00
Robert Bond
d295a507ac
Merged PR 2303: updated company name to pinswg_companyname
...
updated company name to pinswg_companyname
Related work items: #22774
2026-05-11 10:47:39 +00:00
Robert Bond
12a28a4be0
Merged PR 2296: added in statuscode and summary description
...
added in statuscode and summary description
Related work items: #22612 , #22616
2026-05-07 10:20:28 +00:00
Robert Bond
1a2c3ede3b
Merged PR 2295: resolved lint warnings
...
resolved lint warnings
Related work items: #22873
2026-05-05 17:13:53 +00:00
Robert Bond
0ff2d69ba6
Merged PR 2290: add guard rail to check for locale and ensure verify request is language spec...
...
add guard rail to check for locale and ensure verify request is language specific
Related work items: #22303
2026-05-05 08:25:17 +00:00
Robert Bond
d2e88b57d8
Merged PR 2288: add in company name for appellant and autofill agent details in new appeal
...
add in company name for appellant and autofill agent details in new appeal
Related work items: #22842
2026-04-30 16:25:03 +00:00
Robert Bond
b596374c3c
Merged PR 2286: allowed LPAs to make statements
...
allowed LPAs to make statements
Related work items: #22848
2026-04-30 09:15:53 +00:00
Robert Bond
9140476a2a
Merged PR 2285: tweak to live link
...
tweak to live link
Related work items: #22423
2026-04-29 17:03:50 +00:00
Robert Bond
baf5b1838d
Merged PR 2283: Data driven status pages from CRM
...
Related work items: #22805
2026-04-29 15:29:54 +00:00
Robert Bond
1fd192b870
Merged PR 2282: replaced deadlineextensiuondate
...
replaced deadlineextensiuondate
Related work items: #22783
2026-04-29 08:02:29 +00:00
Robert Bond
a25ab433a6
Merged PR 2279: passed in case customer email in search and update rep logic to stop non owne...
...
passed in case customer email in search and update rep logic to stop non owners rasing reps on other owners cases
Related work items: #22095
2026-04-28 12:00:12 +00:00
Robert Bond
b2945790b1
Merged PR 2274: case deadline and watch stream on results
...
case deadline and wat
Related work items: #22423 , #22783
2026-04-27 13:07:46 +00:00
Robert Bond
138f03912b
Merged PR 2273: check for existing record and not insert if exists
...
check for existing record and not insert if exists
Related work items: #22441
2026-04-24 15:56:54 +00:00
Robert Bond
f367f3342c
Merged PR 2271: typo on videos and update portal sumamry fro removed fields
...
Related work items: #22698 , #22813
2026-04-24 13:10:20 +00:00