Skip to content

[dev] [carhartlewis] lewis/comp-admin-dashboard#2313

Merged
Marfuen merged 30 commits intomainfrom
lewis/comp-admin-dashboard
Mar 16, 2026
Merged

[dev] [carhartlewis] lewis/comp-admin-dashboard#2313
Marfuen merged 30 commits intomainfrom
lewis/comp-admin-dashboard

Conversation

@github-actions
Copy link
Contributor

This is an automated pull request to merge lewis/comp-admin-dashboard into dev.
It was created by the [Auto Pull Request] action.

… with audit logging

- Implemented AdminContextController and AdminFindingsController for managing context entries and findings within organizations.
- Added AdminAuditLogInterceptor to log changes made through the admin endpoints.
- Created corresponding service methods and DTOs for context and findings management.
- Included unit tests for all new controllers to ensure functionality and reliability.
…oller

- Updated limit and offset parameters to ensure they are properly constrained and converted to strings.
- Improved handling of pagination values to prevent invalid inputs.
- Changed `findUnique` to `findFirst` for database queries in admin audit log tests.
- Updated `memberId` type to allow null in `FindingAuditParams` and related service methods.
- Modified admin findings controller to handle null `memberId` when creating audit logs.
- Enhanced audit logging to skip entries if no active organization ID is present in the session.
… log interceptor

- Added new audit log descriptions for user impersonation, session revocation, and user removal actions.
- Replaced `AdminAuditLogInterceptor` with `PlatformAuditLogInterceptor` in the AdminIntegrationsController for improved logging.
- Implemented `PlatformAuditLogInterceptor` to log platform credential changes with user context and action descriptions.
…ling

- Modified admin findings controller test to handle null `memberId` when creating audit logs.
- Enhanced admin organizations service test to include additional search criteria for members with the role of 'owner' based on user name and email.
…ove user role update logic

- Updated admin policies controller to set frequency to null instead of undefined when the body frequency is null.
- Enhanced user role update logic in auth server to fetch current user data before checking platform admin status, ensuring accurate updates.
- Updated limit and offset parameters in AdminEvidenceController, AdminOrganizationsController, AdminFindingsController, AdminTasksController, and AdminVendorsController to ensure proper parsing and default values.
- Moved AdminRequest interface to platform-admin-auth-context for better type management and consistency across controllers.
- Updated AdminIntegrationsController to simplify credential hint retrieval by removing unnecessary async calls and integrating hints directly into the response.
- Refactored credential handling in PlatformCredentialRepository to include client ID and secret hints.
- Added client ID and secret hint properties to CreatePlatformCredentialDto and updated related service methods for consistent credential management.
- Introduced a static method in OAuthCredentialsService to mask secrets for improved security.
…service

- Updated the revokeInvitation method to check for 'pending' status when retrieving invitations, ensuring only valid invitations can be revoked.
- Enhanced the NotFoundException message for better clarity on the invitation status.
…r navigation and enhance AddFrameworkModal with session-based permission checks
@vercel
Copy link

vercel bot commented Mar 16, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
app Ready Ready Preview, Comment Mar 16, 2026 8:23pm
comp-api-test Ready Ready Preview, Comment Mar 16, 2026 8:23pm
portal Ready Ready Preview, Comment Mar 16, 2026 8:23pm

Request Review

@cursor
Copy link

cursor bot commented Mar 16, 2026

PR Summary

Medium Risk
Includes a Prisma schema/migration change around user admin flags plus a packaging change to ship @trycompai/auth from dist, which can affect runtime behavior and downstream builds if mismatched with the release pipeline.

Overview
Restores/keeps the User.isPlatformAdmin boolean in the Prisma schema and updates the associated migration to stop dropping the column, while still backfilling role='admin' for platform admins and ensuring role is non-null.

Updates @trycompai/auth to export compiled artifacts from dist (including subpath exports) and tightens typing in permissions.ts by explicitly annotating ac as AccessControl. Test auth mocks are updated to include isPlatformAdmin: false by default.

Written by Cursor Bugbot for commit c5f3584. This will update automatically on new commits. Configure here.

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

@Marfuen Marfuen merged commit 1ef76e0 into main Mar 16, 2026
11 checks passed
@Marfuen Marfuen deleted the lewis/comp-admin-dashboard branch March 16, 2026 20:25
@claudfuen
Copy link
Contributor

🎉 This PR is included in version 3.7.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants