Gani Georgiev 7b6b71e18d disallow client-side filtering and sorting of relations where the collection of the last targeted field has superusers only List/Search API rule

2025-10-23 17:22:47 +03:00

..

validators

added test for partially matched table name/alias as suffix

2025-01-12 13:24:33 +02:00

app.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

auth_origin_model_test.go

…

auth_origin_model.go

…

auth_origin_query_test.go

…

auth_origin_query.go

…

base_backup_test.go

…

base_backup.go

[#7208] exlude lost+found from the backups

2025-09-28 08:28:28 +03:00

base_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

base.go

[#7208] exlude lost+found from the backups

2025-09-28 08:28:28 +03:00

collection_import_test.go

added more geoPoint field acccess tests

2025-04-02 23:25:42 +03:00

collection_import.go

updated collection indexes on system fields validator and normalized v0.23 old collections migration

2024-11-15 09:13:00 +02:00

collection_model_auth_options_test.go

…

collection_model_auth_options.go

updated error messages

2024-11-25 11:28:20 +02:00

collection_model_auth_templates.go

…

collection_model_base_options.go

…

collection_model_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

collection_model_view_options_test.go

…

collection_model_view_options.go

…

collection_model.go

updated scaffold apis to use random id during the collections initialization and made index columns check on the UI case insensitive

2025-08-26 22:02:00 +03:00

collection_query_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

collection_query.go

use rowid as collections order field

2025-04-27 22:08:31 +03:00

collection_record_table_sync_test.go

…

collection_record_table_sync.go

use the nonconcurrent pool for running PRAGMA optimize

2025-07-19 10:02:44 +03:00

collection_validate_test.go

added required validator for the TextField.Pattern option in case it is a primary key

2024-11-19 17:21:43 +02:00

collection_validate.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

db_builder.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

db_connect_nodefaultdriver.go

renamed build tag

2024-11-01 19:10:08 +02:00

db_connect.go

renamed build tag

2024-11-01 19:10:08 +02:00

db_model_test.go

…

db_model.go

…

db_retry_test.go

added 'table is locked' error msg retry check

2024-11-15 07:45:27 +02:00

db_retry.go

added 'table is locked' error msg retry check

2024-11-15 07:45:27 +02:00

db_table_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

db_table.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

db_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

db_tx_test.go

[#6122] fixed model->record and model->collection events sync

2024-12-16 14:49:24 +02:00

db_tx.go

delay default response body write for *Request hooks wrapped in a transaction

2025-04-27 16:25:51 +03:00

db.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

event_request_batch_test.go

…

event_request_batch.go

…

event_request_test.go

updated go deps and bumped app version

2024-12-11 19:00:28 +02:00

event_request.go

[#6402] load the request info context during password/OAuth2/OTP authentication

2025-02-10 16:57:25 +02:00

events.go

[#7268] added FileDownloadRequestEvent.ThumbError field

2025-10-23 11:48:59 +03:00

external_auth_model_test.go

…

external_auth_model.go

…

external_auth_query_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

external_auth_query.go

…

field_autodate_test.go

updated autodate test interceptors

2024-12-02 12:51:25 +02:00

field_autodate.go

[#6000] fixed autodate interceptors

2024-12-02 12:39:02 +02:00

field_bool_test.go

…

field_bool.go

…

field_date_test.go

…

field_date.go

…

field_editor_test.go

added extra validators for the collection int64 field options

2024-12-28 10:13:18 +02:00

field_editor.go

added extra validators for the collection int64 field options

2024-12-28 10:13:18 +02:00

field_email_test.go

…

field_email.go

…

field_file_test.go

soft-deprecated Record.GetUploadedFiles in favour of Record.GetUnsavedFiles

2025-01-10 11:45:55 +02:00

field_file.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

field_geo_point_test.go

reversed the default geoPoint column props for consistency with the types.GeoPoint marshalization

2025-04-15 21:08:38 +03:00

field_geo_point.go

reversed the default geoPoint column props for consistency with the types.GeoPoint marshalization

2025-04-15 21:08:38 +03:00

field_json_test.go

changed the default json field max size to 1mb

2025-05-02 11:49:47 +03:00

field_json.go

changed the default json field max size to 1mb

2025-05-02 11:49:47 +03:00

field_number_test.go

…

field_number.go

…

field_password_test.go

…

field_password.go

…

field_relation_test.go

…

field_relation.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

field_select_test.go

…

field_select.go

updated error messages

2024-11-25 11:28:20 +02:00

field_test.go

lowered the max field id and name length limit to 100

2024-11-11 16:18:24 +02:00

field_text_test.go

added extra validators for the collection int64 field options

2024-12-28 10:13:18 +02:00

field_text.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

field_url_test.go

…

field_url.go

…

field.go

use typed int64 const

2024-12-28 10:23:40 +02:00

fields_list_test.go

added option to insert/move fields at specific position

2024-11-24 12:41:57 +02:00

fields_list.go

added option to insert/move fields at specific position

2024-11-24 12:41:57 +02:00

log_model.go

…

log_printer_test.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

log_printer.go

changed store.Store to accept generic key type

2024-12-23 15:44:00 +02:00

log_query_test.go

…

log_query.go

updated logs code comments

2025-02-11 00:38:22 +02:00

mfa_model_test.go

…

mfa_model.go

added crons web apis and ui listing

2024-12-25 22:24:24 +02:00

mfa_query_test.go

…

mfa_query.go

…

migrations_list_test.go

…

migrations_list.go

…

migrations_runner_test.go

replaced exists bool db scans with int for broader drivers compatibility

2025-01-20 14:16:00 +02:00

migrations_runner.go

updated dependencies and golangci-lint to v2

2025-04-12 20:05:21 +03:00

otp_model_test.go

otp changes - added sentTo field, allow e.Record to be nil when requesting OTP, etc.

2024-11-13 18:34:43 +02:00

otp_model.go

added crons web apis and ui listing

2024-12-25 22:24:24 +02:00

otp_query_test.go

…

otp_query.go

…

record_field_resolver_multi_match.go

…

record_field_resolver_runner.go

disallow client-side filtering and sorting of relations where the collection of the last targeted field has superusers only List/Search API rule

2025-10-23 17:22:47 +03:00

record_field_resolver_test.go

disallow client-side filtering and sorting of relations where the collection of the last targeted field has superusers only List/Search API rule

2025-10-23 17:22:47 +03:00

record_field_resolver.go

[#6493] fixed request.body.json.* values extraction

2025-02-21 18:00:13 +02:00

record_model_auth_test.go

added record.SetRandomPassword() helper and updated oauth2 autogenerated password handling

2024-12-26 13:24:03 +02:00

record_model_auth.go

added record.SetRandomPassword() helper and updated oauth2 autogenerated password handling

2024-12-26 13:24:03 +02:00

record_model_superusers_test.go

…

record_model_superusers.go

always register the installer hooks in case the superuser is created by a console command

2024-11-06 14:23:16 +02:00

record_model_test.go

updated Record.ToInt test to accomodate the latest cast update

2025-06-09 20:48:52 +03:00

record_model.go

[#6835] fixed json_each/json_array_length normalizations to properly check for array values

2025-05-13 21:26:33 +03:00

record_proxy_test.go

…

record_proxy.go

…

record_query_expand_test.go

…

record_query_expand.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

record_query_test.go

[#6337] added support for case-insensitive password auth

2025-01-26 12:24:37 +02:00

record_query.go

[#6689] updated to automatically routes raw write SQL statements to the nonconcurrent db pool

2025-05-02 10:27:41 +03:00

record_tokens_test.go

…

record_tokens.go

upgraded to jwt/v5

2025-01-05 11:18:00 +02:00

settings_model_test.go

added the triggered rate limit rule in the error log details

2025-06-25 20:32:58 +03:00

settings_model.go

[#7098] fixed RateLimitRule.Audience code comment

2025-08-15 19:29:42 +03:00

settings_query_test.go

…

settings_query.go

…

syscall_wasm.go

updated random generator tests

2025-08-22 21:20:30 +03:00

syscall.go

renamed to execve to make it more clear

2025-08-22 20:47:58 +03:00

view_test.go

[#6860] support multiline cast expressions in view collections

2025-05-20 19:40:49 +03:00

view.go

[#6860] support multiline cast expressions in view collections

2025-05-20 19:40:49 +03:00