John O'Hara

Security Review

1

- [x] #778 - [x] #779 - [ ] Review which entities should be protected - #78 - [ ] #780 - [ ] #781 - [ ] #782 -...

**Describe the bug** Horreum RBAC has shifted from keycloak defined roles to database defined roles, whilst also supporting ODIC and basic authentication. After implementing: #780 we should also deprecate the...

**Describe the bug** The toggle check box for a user does not show tick when user is selected in the team members list in `/usersettings#managed-teams` Not selected; ![Screenshot from 2024-06-01...

**Describe the bug** We should log all security related actions in an audit log

**Describe the bug** If a user changes the watching state, i.e. opts out of notifications, the watching icon is not updated  The user needs to refresh to page to...

**Describe the bug** Subscribing to test notification;  Is failing with the following error;  Stack trace; ``` Mapping exception to response: jakarta.validation.ConstraintViolationException: Validation failed for classes [io.hyperfoil.tools.horreum.entity.alerting.WatchDAO] during persist...

**Describe the bug** From the list of Tests, clicking on "Recalculate Datasets" from the "Action Menu"  Displays a modal without the relevant data; 

**Describe the bug** The following query performs badly; calls | total_exec_time | min_exec_time | max_exec_time | mean_exec_time -- | -- | -- | -- | -- 49 | 28512.408452 |...

An exported Schema can be successfully imported as a Test

1

**Describe the bug** If users export a Schema, and then import the schema as a new Test, the import is successful. Horreum should verify the import against the expected type...

**Describe the bug** The new Auth token feature #1952 requires user documentation