100 Commits

Author	SHA1	Message	Date
Yohann D'ANELLO	5abbb84254	Permissions for activities must be more specific to prevent that anyone can validate its own activity	2020-08-15 22:24:48 +02:00
Yohann D'ANELLO	bb2704323a	Spam click on invalidity button is no longer possible	2020-08-13 17:04:10 +02:00
Yohann D'ANELLO	c612e159cf	See user information does not imply see the note balance	2020-08-10 16:32:45 +02:00
Yohann D'ANELLO	1b84c8c603	🐛 The balance must be greater than the *total* amount of a transaction, not the unit price	2020-08-10 16:05:50 +02:00
Yohann D'ANELLO	679ac3a652	Lock invoices, delete them	2020-08-07 11:04:54 +02:00
Yohann D'ANELLO	6c9cf73848	Update permissions to see our own note	2020-08-05 12:22:35 +02:00
Yohann D'ANELLO	5ea8d8f870	🎨 Update activity interface	2020-08-03 16:11:05 +02:00
Yohann D'ANELLO	f870af139e	Typos	2020-08-02 09:51:39 +02:00
Yohann D'ANELLO	7742358b8f	Secretaries can view and add memberships	2020-08-02 09:49:45 +02:00
Yohann D'ANELLO	8de7ba14bd	Add permission for secretaries	2020-08-02 09:35:32 +02:00
Yohann D'ANELLO	8497dbb25c	Club members can see the club	2020-08-02 09:30:18 +02:00
Yohann D'ANELLO	b706efe463	2A+ can change their selected bus or team if the registration is not validated	2020-08-01 23:27:07 +02:00
Yohann D'ANELLO	8434841ec5	Fix one permission	2020-08-01 22:28:28 +02:00
Yohann D'ANELLO	d7b834d908	Translate rights	2020-07-31 22:29:23 +02:00
Yohann D'ANELLO	72dcc93136	Club managers can register new members to a club, even if they don't have the right to create a transaction	2020-07-31 09:49:43 +02:00
Yohann D'ANELLO	aa66361ac7	Update permissions to create clubs. ... For now, only superusers can edit the roles of a user.	2020-07-30 16:36:44 +02:00
Yohann D'ANELLO	9361f3f2f0	Aliases should load really faster	2020-07-30 15:07:30 +02:00
Yohann D'ANELLO	cbd36f110a	Another uplicated permission	2020-07-29 19:13:29 +02:00
Yohann D'ANELLO	c9e68ca66b	Duplicated permission	2020-07-29 19:12:16 +02:00
Yohann D'ANELLO	5a91cac08d	Add permissions to see clubs and users	2020-07-29 18:37:42 +02:00
Yohann D'ANELLO	4549255198	Treasurers can update invalidity reason	2020-07-29 17:42:06 +02:00
Yohann D'ANELLO	750bdcb2c5	Treasurers can of course click on buttons. Fix PATCH requests on the API	2020-07-29 12:25:53 +02:00
Yohann D'ANELLO	3a4145e4d9	Woops, roles didn't have the permissions	2020-07-28 20:56:22 +02:00
Yohann D'ANELLO	54ce157019	Store clothing cut and size in WEI registration	2020-07-28 20:49:32 +02:00
Yohann D'ANELLO	7c6bab88f4	Update permissions to see buses	2020-07-28 20:22:10 +02:00
Yohann D'ANELLO	0bfc3b9454	Not-yet-registered WEI members can see their registrations	2020-07-28 18:09:43 +02:00
Yohann D'ANELLO	55bc288deb	Some roles can only be given in some clubs	2020-07-25 19:59:04 +02:00
Yohann D'ANELLO	fb5e2578af	Merge Role and RolePermissions	2020-07-25 19:40:30 +02:00
Yohann D'ANELLO	71f6daf0e8	Add permission for treasurers to update the validation status of a transaction	2020-07-13 12:10:01 +02:00
Yohann D'ANELLO	2c7995a79e	A transaction can only be created between active notes	2020-06-21 22:47:05 +02:00
Yohann D'ANELLO	302f9e752c	Create a test to check that permission queries are well formed	2020-05-30 15:46:09 +02:00
Yohann D'ANELLO	155b2df330	Fix some permissions, users can log in	2020-05-29 21:26:05 +02:00
Yohann D'ANELLO	4108babdb4	Permissions can be permanent	2020-05-07 21:14:36 +02:00
Yohann D'ANELLO	cdff0d3893	We can view and update our WEI registration while we are not fully registered to the WEI.	2020-04-24 14:30:18 +02:00
Yohann D'ANELLO	16079e3cc5	Fix broken WEI permissions	2020-04-24 14:03:25 +02:00
Yohann D'ANELLO	b81f186866	Add PDF member lists	2020-04-23 18:28:16 +02:00
Yohann D'ANELLO	a85a5bf8fe	Add initial WEI permissions	2020-04-22 13:28:52 +02:00
Yohann D'ANELLO	bd41560f45	Update permission fixtures	2020-04-06 10:45:32 +02:00
Yohann D'ANELLO	0df0f3f66b	Membership fees for paid and unpaid students, closes #43	2020-04-01 04:07:55 +02:00
Yohann D'ANELLO	e98693b214	Memberships are optional for clubs	2020-03-31 16:22:11 +02:00
Yohann D'ANELLO	dd3b7bd7e5	Remove note activities	2020-03-31 14:57:44 +02:00
Yohann D'ANELLO	1aae18e6a6	Improved permissions, 404 and 403 errors will be more frequent (when we type an invalid URL)	2020-03-31 04:16:30 +02:00
Yohann D'ANELLO	691a03ecad	Add some initial permissions for activities	2020-03-28 19:05:21 +01:00
Yohann D'ANELLO	5cf75ebf9e	When a transaction can't becreated because the user don't have the permission to take too much money, then we create an invalid transaction	2020-03-25 15:27:38 +01:00
Yohann D'ANELLO	b9fac82d89	Fixtures are more natural	2020-03-22 22:09:41 +01:00
Yohann D'ANELLO	93bd8489df	Amounts are in cents...	2020-03-20 18:02:12 +01:00
Yohann D'ANELLO	091c427707	Restructurate code	2020-03-20 14:43:35 +01:00
Yohann D'ANELLO	f80cb635d3	Optimize permissions, full support add perms, more fixtures	2020-03-20 00:06:28 +01:00
Yohann D'ANELLO	74c0fcca83	Notes are read-only in the API, but can be modified with scripts (ie. transactions)	2020-03-19 19:29:52 +01:00
Yohann D'ANELLO	7794210cc8	Being superuser is not enough (must have the correct mask), add some initial fixtures	2020-03-19 18:53:06 +01:00