commonscomputer/cal.diy
5
0 Fork 0
Code Issues Pull Requests Actions 1.9k Packages Projects Releases Wiki Activity
752 Commits 2 Branches 621 Tags
fdb45e3745444f9861bc3fce288e5c195722fe65
Commit Graph
87 Commits
Author SHA1 Message Date
Hariom Balhara 9c23a8e5ab Security Fixes (#224) 
Fixes - 2,3,4 security vulnerabilities reported in this message.
https://calendso.slack.com/archives/C03127U5S5Q/p1671922033089329

More Fixes
- Dont't allow a user to add a random attendee to a booking not owned by
him
- Don't allow a user to add a random cal user as an organizer of the
booking.
- Membership deletion should be as per the Privileges of
Owner,Admin,Member
 2023-01-04 15:17:47 -07:00
zomars 604d937661 Linting 2022-12-20 11:58:30 -07:00
Carina WollendorferandCarinaWolli c3e0852541 Only allow team admin and owner to create team event types (#220) 
Currently, anybody can create an event type for any team. With this PR
we only allow team ADMIN and OWNER to create event types for the team.

Co-authored-by: CarinaWolli <wollencarina@gmail.com>
 2022-12-20 10:50:46 -07:00
Joe Au-Yeung 5d892df019 Allow seatsPerTimeSlot and seatsShowAttendees in event type calls (#216) 
This PR allows `seatsPerTimeSlot` and `seatsShowAttendees` in event type
POST and PATCH calls
 2022-12-15 15:36:09 -07:00
zomars 055699f612 Various import and type fixes 2022-11-25 06:58:21 -07:00
alannncandzomars c016a4343d added more endpoints and validations for publish-pay teams (#209) 
## What does the PR do?

- Team billing via API

Just like the web project, we validate that team has stripe metadata
before converting requestedSlug to slug.

Co-authored-by: zomars <zomars@me.com>
 2022-11-22 13:24:25 -07:00
zomars d93fd26a1e Removed unused methods middleware 2022-10-21 13:30:09 -06:00
zomars 00bd908916 Fixes permission errors 2022-10-14 17:41:28 -06:00
zomars 25d3d12319 Adds custom inputs to eventTypes responses 2022-10-14 15:52:09 -06:00
zomars ad35d3a5cd Linting 2022-10-14 12:57:50 -06:00
Omar López f13694fd13 Refactors event-types endpoints (#181) 
refs #175
 2022-10-11 14:14:03 -06:00
Joe Au-Yeung 48f270d032 Remove console log 2022-10-06 10:59:46 -04:00
Joe Au-Yeung 34f5f5f83f Pass userId as single value or array 2022-10-06 10:55:14 -04:00
Joe Au-Yeung ce8af8b6a5 Allow for admin to edit other user's event types 2022-10-05 15:59:34 -04:00
Joe Au-Yeung 362d8ca769 Connect user to new event type 2022-10-03 14:26:00 -04:00
Agusti Fernandez Pardo 6e68671c2a fix: merge w main 2022-06-18 01:52:37 +02:00
Agusti Fernandez Pardo ed1bc8015a feat: initial isAdmin work for events and attendees 2022-06-15 20:43:35 +02:00
Agusti Fernandez Pardo e407a16766 feat: dynamic prisma 2022-06-06 18:17:10 +02:00
Agusti Fernandez Pardo 0eed3e51e4 fix: only check event type ownership if not admin 2022-06-04 02:26:16 +02:00
Agusti Fernandez Pardo 0fc374c810 feat: add admin endpoint support for event-types id 2022-06-04 01:32:05 +02:00
Agusti Fernandez Pardo 12b7b3ecbf fix: add event-types admin endpoints 2022-06-04 01:17:01 +02:00
Agusti Fernandez Pardo 9c3f85834f fix: remove console logs 2022-05-28 01:51:25 +02:00
Agusti Fernandez Pardo 0b66e964fe fix: some logggingeventtypeid 2022-05-27 21:51:40 +02:00
Agusti Fernandez Pardo eee5fd0090 Merge pull request #101 from calcom/fix-event-types-id 
fix: event types id endpoints
 2022-05-27 21:45:17 +02:00
Agusti Fernandez Pardo be4ca8835e fix: event types id endpoints 2022-05-27 21:44:45 +02:00
Agusti Fernandez Pardo 458f37f5e9 Merge branch 'main' into production 2022-05-27 21:19:43 +02:00
Agusti Fernandez Pardo 8627b28a8e fix: conflicts 2022-05-27 21:18:47 +02:00
Agusti Fernandez Pardo b52832f333 fix 2022-05-27 21:01:15 +02:00
Agusti Fernandez Pardo f40e799769 fix event types 2022-05-27 21:01:15 +02:00
Agusti Fernandez Pardo 5b65bd1b66 fix 2022-05-27 21:01:15 +02:00
Agusti Fernandez Pardo 824d01f358 fix: move log of userId 2022-05-27 21:01:15 +02:00
Agusti Fernandez Pardo a91dd428c0 fix 2022-05-27 21:01:01 +02:00
Agusti Fernandez Pardo 9f50972570 fix event-types 2022-05-27 20:49:50 +02:00
Agusti Fernandez Pardo d09fa56f63 fix 2022-05-27 20:47:02 +02:00
Agusti Fernandez Pardo 46e0b8f4f5 fix: moves event-types to find user including it's event-types 2022-05-27 20:46:53 +02:00
Agusti Fernandez Pardo 8f9a970fb6 fix: moves event-types to find user including it's event-types 2022-05-27 20:43:10 +02:00
Agusti Fernandez Pardo 6099bfb4ee fix: more logging 2022-05-23 23:23:53 +02:00
Agusti Fernandez Pardo 4629c5d5c7 fix: move log of userId 2022-05-23 23:18:41 +02:00
Agusti Fernandez Pardo beca5152e9 hotfix: debugging event-types in prod 2022-05-23 22:55:53 +02:00
Agusti Fernandez Pardo 418a4271d9 fix: adds console log to debug event-types 2022-05-20 03:46:01 +02:00
Agusti Fernandez Pardo 1717f14e83 fix: event type validations skip 2022-05-20 03:40:14 +02:00
Agusti Fernandez Pardo 0ca9748674 fix: dont throw err on bad query 2022-05-18 14:27:30 +02:00
Agusti Fernandez Pardo 075808ce40 fix event types 2022-05-18 13:55:05 +02:00
Agusti Fernandez Pardo 47ce92714b fix rewrite metadata 2022-05-17 22:49:12 +02:00
Agusti Fernandez Pardo f8554031ae fix: pass data directly 2022-05-17 22:41:54 +02:00
Agusti Fernandez Pardo f2ea38b440 fix: parse metadata 2022-05-17 22:37:43 +02:00
Agusti Fernandez Pardo fa157961be fix: dont parse on read event-type 2022-05-17 22:32:49 +02:00
Agusti Fernandez Pardo 5aa0b37443 fix build and pass lint 2022-05-17 19:33:18 +02:00
Agusti Fernandez Pardo 9afbb3d127 fix: event-type validations move to pick not omit and separate create/edit 2022-05-16 21:59:22 +02:00
Agusti Fernandez Pardo 08eeb36d47 feat: add operationId for autogenerated sdk 2022-05-05 18:18:00 +02:00