Skip to content

fix: allow admins to use shared Slack buttons and forms - #201

Merged
makeitfutureDev merged 3 commits into
betafrom
fix/admin-controls-20261023
Oct 23, 2026
Merged

makeitfutureDev merged 3 commits into
betafrom
fix/admin-controls-20261023

Conversation

@makeitfutureDev

Copy link
Copy Markdown
Owner

Admins clicking another requester's Settings or Variables button were rejected, while Files already allowed an admin override. Apply the same current-admin authorization to shared menu controls, legacy menu Resume, question forms, busy-thread decisions and engine-switch/retry cards.

Menu views belong to the clicking admin, including personal settings and credentials. Question and run-decision continuations retain the original requester's author, credentials and runtime lane, with the responding admin recorded in audit. Membership, channel authorization, revision checks and single submission remain enforced; automatic cross-author steering protection is unchanged.

Validation: full coverage suite passed (4,025 tests passed, 34 skipped, zero failures; lines 94.30%, branches 86.65%, functions 90.28%). Static, secret scan, security coverage and signed-off commit checks passed. Added regression tests for admin/ordinary-member behavior, personal scope isolation, requester identity, demotion, membership revocation, stale views and replay. FEATURES.md, TEST-PLAN.md and CHANGELOG.md are updated. Private QA definitions are updated; live Slack acceptance remains unexecuted.

Signed-off-by: Tiberiu Socaci <tsocaci@makeitfuture.com>
Signed-off-by: Tiberiu Socaci <tsocaci@makeitfuture.com>
Signed-off-by: Tiberiu Socaci <tsocaci@makeitfuture.com>
@makeitfutureDev
makeitfutureDev merged commit 73501e1 into beta Oct 23, 2026
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants