J3vbandClaude Fable 5 94d8c2f827 test(admin): cover ban authorization matrix (W1-4) ...

Service level: BAN_MEMBERS refusal (Forbidden even for nonexistent targets
— no id enumeration), equal-rank and owner-target hierarchy refusals,
authorized ban/unban round-trip, self-ban rejection. Admin API level:
equal-rank owner ban 403s, a lower-positioned ADMINISTRATOR cannot ban the
owner, downward bans still work. All existing NewAdminAPI/NewHandler test
callsites now inject a real ModerationService so the production
authorization runs in every PATCH-user test.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-19 08:41:12 +02:00

..

static

chore: remove soundboard feature entirely

2026-04-02 17:00:27 +02:00

admin_handler_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

admin.go

fix(admin): route admin-panel bans through ModerationService (W1-4)

2026-07-19 08:41:12 +02:00

api_edge_cases_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

api_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

api.go

fix(admin): route admin-panel bans through ModerationService (W1-4)

2026-07-19 08:41:12 +02:00

handlers_backup_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

handlers_backup.go

fix: resolve all 12 golangci-lint issues

2026-04-03 08:33:55 +02:00

handlers_channels_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

handlers_channels.go

fix: security hardening — 45 issues from full-project Copilot audit

2026-03-29 12:35:04 +02:00

handlers_settings.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

handlers_users.go

fix(admin): route admin-panel bans through ModerationService (W1-4)

2026-07-19 08:41:12 +02:00

helpers.go

chore: remaining server changes (code quality, go mod tidy)

2026-04-01 11:38:33 +02:00

logstream_test.go

feat: TOTP 2FA settings UI, server hardening, full validation pass

2026-03-29 21:31:18 +02:00

logstream.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

main_test.go

feat: add syncutil mutex, test scaffolding, and server hardening

2026-04-01 12:04:15 +02:00

middleware_and_spawn_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

middleware_coverage_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

middleware.go

fix(phase-bc): address review findings — auth, SSRF, seq alignment

2026-04-06 09:29:29 +00:00

setup_handler_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

setup_handler.go

fix(security): harden server against verified code-review findings

2026-07-17 21:08:54 +02:00

types.go

fix compile errors and wire permission cache invalidation

2026-04-05 21:25:35 +00:00

update_handlers_test.go

test(admin): cover ban authorization matrix (W1-4)

2026-07-19 08:41:12 +02:00

update_handlers.go

fix(security): harden server against verified code-review findings

2026-07-17 21:08:54 +02:00