lonnieezell / Bonfire2 / 37835748787

57%

Build Type

push

github

Committed by web-flow

Commit Message

refactor(#583): concentrate Users admin access rules in one module (#589)

Add UserAccess (who may touch whom), AvatarStorage (avatar path, store,
delete) and SaveUser (the save orchestration moved out of the HTTP
method). The controller and the form, permissions and table views now
ask UserAccess instead of repeating the rules.

Purging several users now removes every user's avatar and meta, not only
the first. Nobody with users.edit can ban themselves any more, whether
or not they have me.edit. Re-enable testCanEditUser.

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

Coverage Stats

100 of 118 new or added lines in 5 files covered. (84.75%)

6 existing lines in 1 file now uncovered.

1732 of 3547 relevant lines covered (48.83%)

14.06 hits per line