Ken Johnson 4e445375fa created the info disclosure write-up. Close issue #16

2013-06-02 12:39:04 -04:00

..

admin_controller.rb

added a few things here. Firstly, I fixed the broken delete function with the admin page. Secondly, whenever you register for this application, we will automatically populate your user data to make the application functional. Seemed like the easiest way to do this

2013-06-01 00:19:07 -04:00

application_controller.rb

we are going to fix this by automatically generating data for ppl that register HOWEVER, just in case that fails for some reason, I have applied a filter that ensures if some data is not associated with a person they cannot navigate to all aspects of the application. This is a preventive measure

2013-05-31 19:02:00 -04:00

dashboard_controller.rb

we are going to fix this by automatically generating data for ppl that register HOWEVER, just in case that fails for some reason, I have applied a filter that ensures if some data is not associated with a person they cannot navigate to all aspects of the application. This is a preventive measure

2013-05-31 19:02:00 -04:00

paid_time_off_controller.rb

made some big changes here. The schedule had a has_one relationship with the PTO model. That is a problem since we only get one result back. meaning, a user cant have multiple scheduled events. This has been fixed with the use of has_many within the PTO model. Now, in relation to the PTO section, the next changes to happen are to be a fully functional create action that allows an event to be schedule, the form and controller has already been created. Umm, also, a calendar has been added and when we get the results back from a call to the create event action we will update that calendar. Think that is about it for now

2013-05-28 12:48:35 -04:00

performance_controller.rb

added visualization chart for performance history

2013-05-31 15:20:58 -04:00

retirement_controller.rb

moving in the right direction

2013-05-24 19:51:09 -04:00

schedule_controller.rb

so now, when you add a PTO scheduled date, the calendar on your PTO page automatically updates to show this event :-)

2013-05-31 10:31:35 -04:00

sessions_controller.rb

we are going to fix this by automatically generating data for ppl that register HOWEVER, just in case that fails for some reason, I have applied a filter that ensures if some data is not associated with a person they cannot navigate to all aspects of the application. This is a preventive measure

2013-05-31 19:02:00 -04:00

tutorials_controller.rb

created the info disclosure write-up. Close issue #16

2013-06-02 12:39:04 -04:00

users_controller.rb

seems the signup bug has been fixed, I would close this for now

2013-06-01 19:49:01 -04:00

work_info_controller.rb

added a new vulnerability plus completed the work info page

2013-05-31 11:41:54 -04:00