Gaetan Craig-Riou 25d55fec24 Filter out variant the user is not allowed to update ...

With a product with mutiple variant, we can end in a scenario where a
user sees variant associated to producer it doesn't have permission for.
This prevents the user from updating any variant. This fix filter out
variant a user shoudn't be seeing

2025-11-10 16:29:27 +11:00

..

admin

Filter out variant the user is not allowed to update

2025-11-10 16:29:27 +11:00

api

Pass the variant_tag_enbabled options to relevant services

2025-11-03 14:25:05 +11:00

concerns

Refactor order cycle handling to simplify closed cycle checks and improve redirection messaging

2025-11-05 02:50:01 +05:00

payment_gateways

Refactor order cycle expiry handling to allow skipping order emptying during checkout

2025-10-20 01:42:20 +05:00

spree

Merge pull request #13632 from rioug/security-247-code-injection

2025-11-05 16:34:37 +11:00

stripe

Use rubocop auto correct to add frozen string literal to all files

2021-06-17 23:07:26 +01:00

application_controller.rb

Style/SuperArguments

2024-06-05 09:29:42 +10:00

base_controller.rb

Replace set_methods in order model

2025-04-24 09:29:40 +02:00

cart_controller.rb

13024: fix dfc catalog sync for blank cart

2024-12-12 04:28:15 +05:00

checkout_controller.rb

Redeem VINE voucher before redirecting to payment url

2025-08-11 16:28:04 +10:00

enterprises_controller.rb

13019: fix redirect issue

2025-03-05 01:35:46 +05:00

errors_controller.rb

Revert "Notify bugsnag on 404 errors"

2024-11-21 15:28:19 +11:00

groups_controller.rb

Refactor embedding to a Concern

2022-01-18 12:22:06 +00:00

home_controller.rb

Safely autocorrect Style/GuardClause

2023-09-01 08:55:56 +09:00

line_items_controller.rb

Fix Style/HashSyntax

2023-09-09 09:00:38 +09:00

locales_controller.rb

Create a new method to change the lang of the app

2021-07-06 10:09:37 +02:00

map_controller.rb

Use rubocop auto correct to add frozen string literal to all files

2021-06-17 23:07:26 +01:00

omniauth_callbacks_controller.rb

Add spec

2025-02-12 16:10:36 +11:00

payments_controller.rb

Simplify redirect logic in PaymentsController

2025-09-22 11:54:20 +05:00

producers_controller.rb

Refactor embedding to a Concern

2022-01-18 12:22:06 +00:00

registration_controller.rb

Clear up redirecting logic and path building

2022-01-29 10:08:51 +00:00

shop_controller.rb

Replace set_methods in order model

2025-04-24 09:29:40 +02:00

shops_controller.rb

Drop embedded shops code

2022-01-26 19:58:39 +00:00

sitemap_controller.rb

Use rubocop auto correct to add frozen string literal to all files

2021-06-17 23:07:26 +01:00

user_confirmations_controller.rb

Safely autocorrect Rails/ActionOrder

2023-08-01 22:50:21 +09:00

user_passwords_controller.rb

Replace deprecated call render operations:

2023-04-05 14:19:34 +10:00

user_registrations_controller.rb

use format.json in UserRegistrationController#create

2025-02-03 19:02:48 +01:00

voucher_adjustments_controller.rb

Clarify voucher code not found can mean fully redeemed

2025-05-29 14:18:32 +10:00

webhook_endpoints_controller.rb

Safely autocorrect Style/RedundantConstantBase

2023-11-10 09:13:57 +09:00

well_known_controller.rb

Publish DFC endpoints as JSON

2025-10-10 16:18:22 +11:00