kolaente f066eb3ea4 fix: require CanUpdate for project background deletion ... RemoveProjectBackground previously used checkProjectBackgroundRights which only checks CanRead, allowing read-only users to delete project backgrounds. Added checkProjectBackgroundWriteRights that checks CanUpdate and use it in RemoveProjectBackground. Ref: GHSA-564f-wx8x-878h		2026-03-20 11:41:28 +00:00
..
auth	fix(auth): make SameSite=None conditional on HTTPS for refresh cookie	2026-03-03 10:41:19 +01:00
avatar	fix: use session-aware file creation to avoid nested transactions	2026-02-25 11:03:02 +01:00
background	fix: require CanUpdate for project background deletion	2026-03-20 11:41:28 +00:00
dump	fix(restore): extract preValidateTableData to reduce cyclomatic complexity	2026-02-25 13:01:00 +01:00
keyvalue	feat: add keyvalue.Remember function	2025-07-17 16:19:13 +02:00
migration	feat: register Vikunja tables with db package at init	2026-03-04 15:37:54 +01:00