Skip to content

Conversation

@Brad123ghost
Copy link
Contributor

@Brad123ghost Brad123ghost commented Nov 1, 2025

Describe the issue

Anyone could access the dashboard page of any scenario.
Dashboard tables needed restyling to fit the existing theme

Describe the solution

Read all my commit messages all changes outlined in detail in the commits

  • Updated dashboard table Styling
  • Created dashboard auth only allowed authorized people
  • Users can now see scenarios they have dashboard access to on main page

Risk

Maybe lots of things? 😅 jk maybe 1 or 2
Crud hook could break, made some changes but it shouldn't

Definition of Done

  • Code peer-reviewed
  • Wiki Documentation is written and up to date
  • Unit tests written and passing
  • Integration tests written and passing
  • Continuous Integration build passing
  • Acceptance criteria met
  • Deployed to production environment

Reviewed By

Who reviewed your PR - for commit history once merged

Brad123ghost and others added 14 commits October 12, 2025 05:05
[Front] Crudhook:
 - Updated to check if mounted before setting stuff and retrying to avoid errors in console (this could break other stuff but it really shouldn't)

[Front] ScenarioSelectionPage(home):
 - Added ability to receive toast notifications

[Front] Dashboard:
 - Updated the API endpoints the page hits for data and added a check to avoid hitting endpoints multiple times just for it to be unauthorized
 - Cleaned up unused code in viewgroup.

[Back] Dashboard API:
 - Added middleware auth to endpoints
 - Updated the dashboardAuth middleware to support the viewgroup page
CrudHooks:
 - Updated useGet to set a response that the application and interact with instead of just the data
Now supports old scenarios. Legacy scenarios created without an AccessList, the owner is now the only person that should be able to access it.
[Backend]
Access Schema - Updated access schema to store more info on user that has access
Access API - Added and updated endpoints
AccessDao - Updated for better funtionality
Dashboard Auth - Refactor

[Frontend]
Access Table - Created a temp access table where you can search for users who have access and delete users from being able to access. Deleting currently works if they are on the table but no way to add a user (WIP).

[Packages]
+TanStack react table (access table)
+ React select for adding users (WIP)
[Dashboard Auth]
 - Added owner check for create/delete stuff using scenario auth

[Misc]
 - Prettier + lint front/back end
Copy link
Contributor

@harbassan harbassan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

approving without comprehensive testing.

@harbassan harbassan merged commit ab011ee into master Nov 18, 2025
5 checks passed
@harbassan harbassan deleted the Dashboard-access branch November 18, 2025 02:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants