Gaetan Craig-Riou 25d55fec24 Filter out variant the user is not allowed to update ...

With a product with mutiple variant, we can end in a scenario where a
user sees variant associated to producer it doesn't have permission for.
This prevents the user from updating any variant. This fix filter out
variant a user shoudn't be seeing

2025-11-10 16:29:27 +11:00

..

bulk_line_items_controller.rb

Bump RuboCop to 1.86.6

2025-10-27 11:30:33 +01:00

column_preferences_controller.rb

Autocorrect Style/HashConversion offenses

2025-04-29 14:27:31 -04:00

connected_app_settings_controller.rb

Show success message

2024-08-07 10:31:06 +10:00

connected_apps_controller.rb

Merge pull request #12949 from rioug/12859-use-VINE-voucher

2024-12-03 14:04:44 +11:00

contents_controller.rb

Give ContentConfig an updated_at attribute and a usable cache_key

2023-05-08 14:07:50 +01:00

customers_controller.rb

Update CustomersWithBalanceQuery

2024-02-26 23:25:33 +05:00

dfc_product_imports_controller.rb

Simplify controller

2025-03-27 13:36:48 +11:00

enterprise_fees_controller.rb

Rubocop. Fix cyclomatic complexity in fees controller #11326

2024-06-26 06:36:42 +08:00

enterprise_groups_controller.rb

Fix Style/HashSyntax

2023-09-09 09:00:38 +09:00

enterprise_relationships_controller.rb

Fix Layout/LineLength

2023-06-23 09:08:04 +09:00

enterprise_roles_controller.rb

fix enterprise roles page performance

2024-01-04 00:19:15 +07:00

enterprises_controller.rb

Per review, remove unnecessary new translation

2025-11-03 14:25:48 +11:00

inventory_items_controller.rb

Use rubocop auto correct to add frozen string literal to all files

2021-06-17 23:07:26 +01:00

invoice_settings_controller.rb

Remove receipt printing settings

2023-02-14 08:08:20 +00:00

matomo_settings_controller.rb

Use rubocop auto correct to add frozen string literal to all files

2021-06-17 23:07:26 +01:00

oidc_settings_controller.rb

Allow user to disconnect OIDC account

2024-02-22 10:15:07 +11:00

order_cycles_controller.rb

Move order_cycle datetime verification logic to service files [OFN-12775]

2024-08-22 22:17:12 +01:00

producer_properties_controller.rb

Use rubocop auto correct to add frozen string literal to all files

2021-06-17 23:07:26 +01:00

product_import_controller.rb

Pass actors instead of AR associations to Flipper

2025-10-14 13:32:51 +11:00

product_preview_controller.rb

Add permission check

2024-09-17 12:01:53 +10:00

products_v3_controller.rb

Filter out variant the user is not allowed to update

2025-11-10 16:29:27 +11:00

proxy_orders_controller.rb

Safely autocorrect Rails/I18nLazyLookup

2023-08-14 17:29:11 +09:00

reports_controller.rb

Bump RuboCop to 1.86.6

2025-10-27 11:30:33 +01:00

resource_controller.rb

Style/SendWithLiteralMethodName

2024-06-05 09:38:21 +10:00

schedules_controller.rb

remove unnecessary require instructions

2024-01-03 11:34:57 +01:00

stripe_accounts_controller.rb

12332 - Fix rubocop Rails/I18nLocaleTexts errors

2024-04-11 10:14:50 +10:00

stripe_connect_settings_controller.rb

Fix cops StringConcatenation

2024-06-11 15:17:32 +10:00

subscription_line_items_controller.rb

Move the inventory feature check to ScopeVariantToHub

2025-07-09 13:43:12 +10:00

subscriptions_controller.rb

Fix Layout/LineLength

2023-06-23 09:08:04 +09:00

tag_rules_controller.rb

Fix variant tag rules endpoint

2025-11-03 15:50:12 +11:00

terms_of_service_files_controller.rb

Handle user clicking upload button early

2021-06-09 14:06:54 +10:00

variant_overrides_controller.rb

Ensure user is loaded before loading data

2025-05-13 15:12:16 +10:00

vouchers_controller.rb

Handle unique voucher code exception

2023-09-07 15:13:47 +02:00