UMBRA

History

Kyle Pope dd637bdc84 Fix QA findings from performance, pentest, and code review

Perf-1: Eliminate duplicate permission query on task update.
get_effective_task_permission now returns (effective, project_level)
tuple so the SEC-P02 allowlist check reuses the project-level
permission from the first call instead of querying again.

Perf-2: Memoize member permission lookup in ProjectDetail. Replace
3 inline acceptedMembers.find() calls with useMemo-derived
myPermission and canEditTasks.

S-06: Pass members/currentUserId/ownerId/canAssign to mobile
TaskDetailPanel (was missing — AssignmentPicker never appeared on
mobile).

S-08: Add missing selectinload(TaskComment.user) to subtask comments
chain in _task_load_options. Subtask comment author_name was always
null.

W-01: useDeltaPoll stores queryKeyToInvalidate in a ref to prevent
infinite re-render if caller passes inline array literal.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-17 04:55:47 +08:00

__init__.py

Initial commit

2026-02-15 16:13:41 +08:00

admin.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

auth.py

Address code review findings across all phases

2026-03-13 00:19:33 +08:00

calendars.py

Add collaborative project sharing, task assignments, and delta polling