Three operator gaps, all found the same way — a person could not sign up and the
app showed nobody anything.
- DELETE /api/admin/invites/{id} with a delete control on both the pending
requests and the previously-decided list. Deny keeps the row so the person
cannot immediately re-ask; delete forgets the address. Refused with 409 while
a User row exists for it, because is_allowed reads that row and removing it
would revoke a live user's access with no other sign — the list ships
has_account so the UI withholds the button instead of offering one that fails.
- Email is fail-soft by design, which had come to mean invisible. _send() now
records an email_undelivered notification for every admin when a message is
skipped or rejected, naming the message that was lost, throttled to one an
hour. /api/me carries email_configured, driving a standing warning on
Configuration → Email / SMTP and above the access-request list.
- The sign-in card's Create account / Forgot password / Didn't get the email
views are history entries (useHistorySubview), so Back returns to the previous
view instead of only moving the address bar.
Also: the per-test rate-limiter reset sweeps every loaded app.* module rather
than a hand-kept list of three — this change added a limiter outside it.
25 lines
875 B
JSON
25 lines
875 B
JSON
{
|
|
"user_role_change": "Role changed",
|
|
"user_suspend": "User suspended",
|
|
"user_unsuspend": "User reinstated",
|
|
"user_delete": "User deleted",
|
|
"invite_approve": "Access request approved",
|
|
"invite_deny": "Access request denied",
|
|
"invite_add": "Email whitelisted",
|
|
"demo_add": "Demo email added",
|
|
"demo_remove": "Demo email removed",
|
|
"demo_reset": "Demo reset",
|
|
"discovery_purge": "Discovery purged",
|
|
"config_set": "Setting changed",
|
|
"config_reset": "Setting reset",
|
|
"scheduler_interval": "Job interval changed",
|
|
"maintenance_tune": "Maintenance tuned",
|
|
"sync_pause": "Sync paused",
|
|
"sync_resume": "Sync resumed",
|
|
"job_run": "Scheduler job run",
|
|
"audit_clear": "Audit log cleared",
|
|
"download_credential_set": "Download cookies set",
|
|
"download_credential_delete": "Download cookies removed",
|
|
"invite_delete": "Whitelist entry deleted"
|
|
}
|