James Smith

Add User Groups, lists of users that creators can use to manage access to their content

1

Follows up #5127 to add UI for actually using groups. Resolves #2963.

We will need an API call to be able to add users to custom groups (added in #2963 )

MAF-005: First-user auto-admin flow poses security risks

1

The first user to authenticate automatically receives administrator privileges. Upon a fresh installation, the first user who successfully authenticates using normal login is automatically granted full administrative privileges. Impact: *...

Download files from MyMiniFactory

7

Work in progress; the code will work, but in order to access download URLs, we need to use a different OAuth flow, just API key isn't good enough.

Bad layout in file sidebar (zh-CN, maybe others)

3

> BTW, the page layout seems a bit anbormal in the model detail info: > _Originally posted by @macdylan in [#5033](https://github.com/manyfold3d/manyfold/issues/5033#issuecomment-3509297706)_

XRFragments microformat

3

Add a link to the entrypoint URL in HTML of each Model URI. `` @coderofsalvation is `rel=me` the right thing to use here? That's more for identity, would a custom...

S3 keys and secrets are stored plaintext in the database

1

These should be more secure. Use https://guides.rubyonrails.org/v7.2/active_record_encryption.html

Automatically check (or ideally, set) the CORS policy for S3 storage

2

I found the root cause of the issue. I had to configure the CORS policy on my S3 storage container. _Originally posted by @matty14892 in https://github.com/manyfold3d/manyfold/discussions/5032#discussioncomment-14929837_

> Is it possible to disable the new confirmation prompts? I'm working on importing over 100k models, and the additional confirmation prompts has really added a lot of additional clicking...

#3658 introduces a strength meter, but it only uses colour for feedback. We need to add text and appropriate aria attributes to make it accessible to visually impaired users and...