Alexey Bezhan 36f41c23e1 Always use both folder and service ID when getting template folder ...

Currently there aren't any permission checks based on folder IDs in
the admin app or the API, so it's possible for a user to modify the
folder ID to perform operations on folders outside their service.

Our usual way to avoid this is to always use service_id filter when
fetching objects from the database.

2018-11-07 13:51:37 +00:00

..

__init__.py

move days_ago to utils and make it tz aware

2018-04-30 11:13:21 +01:00

annual_billing_dao.py

…

api_key_dao.py

…

complaint_dao.py

Paginate the function to get all complaints

2018-07-03 11:11:49 +01:00

daily_sorted_letter_dao.py

As it turns out the s3ftp used to mount the s3 bucket to our ftp server puts the file on s3 more than once. So the SNS topic is triggered more than once.

2018-03-14 17:04:58 +00:00

dao_utils.py

…

date_util.py

add tests for new statistics and fact notification status functions

2018-07-03 14:58:32 +01:00

dvla_organisation_dao.py

…

email_branding_dao.py

Add unique constraint to email branding domains

2018-09-04 11:10:46 +01:00

events_dao.py

…

fact_billing_dao.py

Update billing to ignore failed letters.

2018-10-29 14:02:40 +00:00

fact_notification_status_dao.py

Adjust attribute key names and data types to work with format_statistics

2018-11-06 13:30:37 +00:00

inbound_numbers_dao.py

…

inbound_sms_dao.py

Only get inbound messages that are a maximum of 7 days old

2018-05-10 14:00:55 +01:00

invited_org_user_dao.py

…

invited_user_dao.py

…

jobs_dao.py

rename days_ago to midnight_n_days_ago

2018-04-30 11:50:56 +01:00

notification_usage_dao.py

…

notifications_dao.py

Some minor refactoring.

2018-10-24 11:24:53 +01:00

organisation_dao.py

…

permissions_dao.py

…

provider_details_dao.py

…

provider_rates_dao.py

…

service_callback_api_dao.py

Send complaints on to service callback APIs using an async task

2018-07-19 16:59:39 +01:00

service_data_retention_dao.py

Update method to delete notifications that are a week old, to look at the days of retention set for the service.

2018-08-06 13:51:54 +01:00

service_email_reply_to_dao.py

Add DAO function and endpoint for archiving email reply_to addresses

2018-04-30 15:25:17 +01:00

service_inbound_api_dao.py

add delete functions for inbound and callback api objects

2018-07-05 11:09:17 +01:00

service_letter_contact_dao.py

Add DAO function and endpoint for archiving letter contact blocks

2018-04-30 15:25:17 +01:00

service_permissions_dao.py

…

service_sms_sender_dao.py

Add DAO function and endpoint for archiving SMS senders

2018-04-30 15:25:17 +01:00

service_whitelist_dao.py

…

services_dao.py

Added constraints to services.postage: not nullable and can only containt "first" or "second"

2018-09-18 17:41:25 +01:00

stats_template_usage_by_month_dao.py

…

template_folder_dao.py

Always use both folder and service ID when getting template folder

2018-11-07 13:51:37 +00:00

templates_dao.py

refactor template stats endpoint to read from new redis keys

2018-04-30 11:13:21 +01:00

users_dao.py

Move code that escapes special chars to helper function and use it

2018-07-13 15:47:21 +01:00