Marcel 070153a71d fix: allow WRITE_ALL users to post, reply, and edit comments ...

All five comment write endpoints (post doc comment, reply to doc comment,
post annotation comment, reply to annotation comment, edit comment) only
listed ANNOTATE_ALL in @RequirePermission. Users with WRITE_ALL received
403 on every comment action. Same pattern as the annotation fix.

Tests: CommentControllerTest (+5 RED→GREEN for WRITE_ALL on each method).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-28 15:52:56 +01:00

.devcontainer

fix: correct devcontainer workspace path mismatch

2026-03-15 13:44:06 +01:00

.gitea/workflows

feat(frontend): add forgot-password and reset-password pages

2026-03-23 07:26:35 +01:00

.husky

chore(hooks): remove pre-push E2E hook

2026-03-22 22:15:00 +01:00

.vscode

fix: activate dev Spring profile in VS Code launch config

2026-03-15 14:17:07 +01:00

backend

fix: allow WRITE_ALL users to post, reply, and edit comments

2026-03-28 15:52:56 +01:00

docs

docs: add mail configuration guide

2026-03-23 09:20:43 +01:00

frontend

fix: use bind:group in UserGroupsSection to prevent admin permission loss

2026-03-28 15:42:03 +01:00

scripts

devops: add rebuild-frontend.sh script

2026-03-23 22:39:53 +01:00

.gitignore

chore: update ignore file

2026-03-17 13:35:32 +00:00

CLAUDE.md

docs: add CODESTYLE.md with Clean Code, DRY/KISS, and SOLID principles

2026-03-20 11:36:34 +01:00

CODESTYLE.md

docs(codestyle): add Svelte 5 specific rules with examples

2026-03-20 15:58:40 +01:00

COLLABORATING.md

docs(collab): add user journey and E2E scenario requirements

2026-03-22 19:44:18 +01:00

docker-compose.ci.yml

ci: set up CI pipeline with unit, backend, and E2E test jobs

2026-03-19 12:03:37 +01:00

docker-compose.yml

fix(e2e): activate e2e profile in dev mode and create reader user idempotently

2026-03-24 08:25:54 +01:00

Description

No description provided

45 MiB

Languages

Python 73.1%

TypeScript 11.5%

Java 10.9%

Svelte 4.2%

Shell 0.1%