ihompadmin/tasq
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

QA hardening: security RLS fixes, Flutter 3.47.5 upgrade, UI/validation fixes

Browse Source 
Security — enforce write authorization server-side (was UI/RPC-only):
- it_service_requests RLS: block cross-office read/edit + self-approve (QA-015)
- pass_slips RLS: owner can complete but not self-approve (QA-046)
- swap_requests RLS: scope select/update to participants + admin (QA-047)
- storage: tighten it_service_attachments + task_attachments write/delete (QA-027)
- admin_user_management edge function: allow programmers to manage users (QA-016)

Fixes:
- workforce generator "uncovered shifts" false alarms (QA-043/044)
- network-map VLAN + New-location dialog validation, disabled-until-valid (QA-048)
- de-flake time-of-day-dependent dashboard metrics test (QA-045)

Toolchain:
- upgrade to Flutter 3.47.5 / Dart 3.13.4; font_awesome_flutter 11.0.0,
  flutter_quill 11.6.0, pdfrx 2.6.5; clear resulting deprecations (QA-002)

analyze clean; 139 tests pass; web build succeeds. Report + evidence in docs/qa/.

Note: also carries the in-progress Brick model cleanup already present in the
working tree. QA-001 (AI keys public in the build) is deferred by owner decision.

Co-Authored-By: claude-flow <ruv@ruv.net>
This commit is contained in:
Marc Rejohn Castillano
2026-09-26 11:52:16 +08:00
parent e49b52949c
commit 3cb980b629
125 changed files with 3420 additions and 2853 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/dashboard_metrics_provider_test.dart
+15 -12
View File
@@ -3,19 +3,19 @@
import 'dart:async';
import 'package:flutter_test/flutter_test.dart';
import 'package:flutter_riverpod/flutter_riverpod.dart';
import 'package:tasq/models/it_service_request.dart';
import 'package:tasq/models/it_service_request_assignment.dart';
import 'package:tasq/models/profile.dart';
import 'package:tasq/models/ticket.dart';
import 'package:tasq/models/task.dart';
import 'package:tasq/models/it_service_request.model.dart';
import 'package:tasq/models/it_service_request_assignment.model.dart';
import 'package:tasq/models/profile.model.dart';
import 'package:tasq/models/ticket.model.dart';
import 'package:tasq/models/task.model.dart';
import 'package:tasq/models/task_assignment.dart';
import 'package:tasq/models/ticket_message.dart';
import 'package:tasq/models/duty_schedule.dart';
import 'package:tasq/models/attendance_log.dart';
import 'package:tasq/models/duty_schedule.model.dart';
import 'package:tasq/models/attendance_log.model.dart';
import 'package:tasq/models/live_position.dart';
import 'package:tasq/models/leave_of_absence.dart';
import 'package:tasq/models/pass_slip.dart';
import 'package:tasq/models/team.dart';
import 'package:tasq/models/leave_of_absence.model.dart';
import 'package:tasq/models/pass_slip.model.dart';
import 'package:tasq/models/team.model.dart';
import 'package:tasq/models/team_member.dart';
import 'package:tasq/screens/dashboard/dashboard_screen.dart';
import 'package:tasq/utils/app_time.dart';
@@ -327,10 +327,13 @@ void main() {
final schedule = DutySchedule(
id: 's2',
// Anchor the shift around `now` so the shift is always active when the
// suite runs; a hard-coded 08:00–16:00 window made this test pass only
// during daytime and report 'Off duty' (correctly) at night.
userId: profile.id,
shiftType: 'am',
startTime: DateTime(now.year, now.month, now.day, 8),
endTime: DateTime(now.year, now.month, now.day, 16),
startTime: now.subtract(const Duration(hours: 1)),
endTime: now.add(const Duration(hours: 4)),
status: 'scheduled',
createdAt: now,
checkInAt: null,