kitos 0b60531677 fix(users): grant manager Review Queue access, restrict Webhooks to admin ...

Manager could not see the Review Queue nav item, load the page, or
call mark-reviewed (red_lead/blue_lead/admin only) — added to the
route guard, sidebar visibility, badge query, and the backend
endpoint's role check.

Webhook Configuration was shown to red_lead/blue_lead in Settings
even though the backend already restricted every webhook endpoint to
admin only — the tab is now admin-only in the UI too, matching what
was already enforced server-side.

2026-07-16 10:31:21 +02:00

..

fixtures

feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)

2026-02-10 09:07:43 +01:00

__init__.py

feat(phase-9): implement MVP polishing and closure

2026-02-06 16:30:35 +01:00

conftest.py

test(campaigns): promote cookie-safe request helper to shared conftest fixture

2026-07-04 12:02:09 +02:00

test_admin_config_export_import.py

fix(security): stop leaking live Jira/Tempo admin tokens in config export

2026-07-08 11:08:09 +02:00

test_admin_excluded_from_test_workflow.py

fix(permissions): admin can no longer operate tests — start/submit/edit/create, view only

2026-07-13 09:27:43 +02:00

test_analytics_advanced_metrics.py

fix(analytics): restrict operators endpoint to admin [FASE-2.5]

2026-05-18 14:00:47 +02:00

test_assign_operators.py

feat(review): review queue for leads + manual reviewer reassignment

2026-07-10 16:19:14 +02:00

test_audit_trail.py

feat(audit): enhanced audit trail with IP, user-agent and integrity hash [FASE-3.1]

2026-05-18 14:16:18 +02:00

test_auth_login_audit.py

feat(auth): audit login success and failure attempts [FASE-3.2]

2026-05-18 14:16:53 +02:00

test_auth.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

test_blind_visibility.py

fix(tests): remove blind visibility, both teams always see each other's fields

2026-07-14 13:36:19 +02:00

test_campaign_approval_router.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

test_campaign_approval.py

feat(campaigns): add get_campaign_timeline service function

2026-07-04 12:02:09 +02:00

test_campaign_entity.py

refactor(campaigns): fix approve() error message, add terminal-state test

2026-07-04 12:02:08 +02:00

test_campaign_from_threat_actor.py

fix(backend): resolve refresh-token expiry deadlock, missing Jira on normal campaign approval, discarded threat-actor campaign start_date

2026-07-07 13:42:26 +02:00

test_campaign_schedule_gate.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

test_campaigns_and_snapshots.py

feat(phase-34): resolve blocking tech debt — Redis, domain exceptions, indexes, CI

2026-02-17 15:43:05 +01:00

test_compliance_entity.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

test_coverage_by_tactic_order.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

test_d3fend_import_service.py

feat(d3fend): flag review_required on new ATT&CK-D3FEND mappings

2026-07-07 16:20:01 +02:00

test_data_classification.py

fix(permissions): admin can no longer operate tests — start/submit/edit/create, view only

2026-07-13 09:27:43 +02:00

test_data_sources.py

feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)

2026-02-10 09:07:43 +01:00

test_domain_enums.py

feat(domain): add domain layer foundation -- enums, value objects, TechniqueEntity, repository ports

2026-02-18 19:10:31 +01:00

test_health.py

feat(phase-9): implement MVP polishing and closure

2026-02-06 16:30:35 +01:00

test_heatmap_layer_registry.py

feat: make heatmap layers extensible via LayerRegistry (OCP)

2026-02-20 16:07:36 +01:00

test_heatmap_service.py

feat: make heatmap layers extensible via LayerRegistry (OCP)

2026-02-20 16:07:36 +01:00

test_heatmap_technique_name.py

feat(heatmap): expose technique name + real status on every layer

2026-07-09 14:12:58 +02:00

test_hold_resume.py

fix(tests): restrict On Hold/Resume to whichever team currently owns the test

2026-07-14 17:24:05 +02:00

test_import_service_protocol.py

feat: add ImportService protocol and registry for OCP-compliant import extensibility (LP-7)

2026-02-20 13:31:18 +01:00

test_integration_v2.py

test: stabilize Phase 0 API and workflow tests [FASE-0.4]

2026-05-18 13:19:27 +02:00

test_jira_config_endpoint.py

fix(jira): expose non-admin jira-config, drop security-test label; catalog paging

2026-07-10 10:24:13 +02:00

test_jira_link.py

test(jira): add JiraLink model and jira_service tests [FASE-1.1]

2026-05-18 12:02:21 +02:00

test_jira_router.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:33:40 +02:00

test_jira_service.py

fix(jira,tests): clarify manager-resolved disputes in Jira and the Summary tab

2026-07-15 15:26:00 +02:00

test_jira_sync_job.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:36:26 +02:00

test_jira_test_connection.py

fix(jira): report which admin config field is actually missing

2026-07-09 12:02:04 +02:00

test_list_operators.py

fix(assign): exclude admin from assignable operators; sync Jira on assign even for first-time users

2026-07-10 13:08:23 +02:00

test_metrics_v2.py

refactor(metrics): extract query logic to metrics_query_service, thin down router to HTTP adapter

2026-02-19 17:06:07 +01:00

test_osint_enrichment_service.py

test(intel): verify OSINT enrichment and stale coverage detection [FASE-4]

2026-05-18 14:50:31 +02:00

test_phase5_snapshots.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

test_procedure_extraction_service.py

fix(tests): recognize sysmon, wevtutil, auditpol as detection commands

2026-07-14 17:24:14 +02:00

test_procedure_suggestions.py

feat(tests): make Expected Detection editable when creating a test from template

2026-07-15 11:05:41 +02:00

test_professional_reports_router.py

fix(tests): patch REPORT_OUTPUT_DIR in report router tests to satisfy path traversal check

2026-06-12 14:27:59 +02:00

test_rate_limits.py

feat(security): extend rate limits on sync, tests, evidence and reports [FASE-3.4]

2026-05-18 14:16:53 +02:00

test_redis_client.py

feat(infra): add Redis service and client for Phase 0 [FASE-0.1]

2026-05-18 13:18:45 +02:00

test_report_engine.py

test(reports): add ReportEngine unit tests [FASE-2.1]

2026-05-18 14:00:37 +02:00

test_report_generation_service.py

feat(reports): extend report generation service [FASE-2.3]

2026-05-18 14:00:42 +02:00

test_repositories.py

feat(infra): add repository implementations, mappers, FastAPI wiring, and technique indexes

2026-02-18 19:10:50 +01:00

test_resolve_dispute_router.py

feat(tests): let managers escalate and directly resolve disputed tests

2026-07-15 13:03:01 +02:00

test_review_gates_router.py

fix(permissions): admin can no longer operate tests — start/submit/edit/create, view only

2026-07-13 09:27:43 +02:00

test_review_queue_manager_access.py

fix(users): grant manager Review Queue access, restrict Webhooks to admin

2026-07-16 10:31:21 +02:00

test_reviewer_queue_filter.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

test_scoring_and_compliance.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

test_security_validators.py

fix(api): return 422 for validation errors with serializable payloads [FASE-3.3]

2026-05-18 14:16:53 +02:00

test_stale_detection_service.py

test(intel): verify OSINT enrichment and stale coverage detection [FASE-4]

2026-05-18 14:50:31 +02:00

test_t106_workflow_service.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

test_t107_status_service.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t108_atomic_import.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t109_tests_router.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_t110_evidence_router.py

refactor(evidence): extract permission validation and queries to evidence_service, use domain exceptions

2026-02-19 19:02:36 +01:00

test_t111_test_templates_router.py

feat(templates): add pagination with total counts to catalog and campaign picker

2026-07-16 10:01:20 +02:00

test_t112_system_import.py

test: add TestEntity tests and fix test infrastructure (222 green)

2026-02-18 15:29:24 +01:00

test_technique_entity.py

fix(coverage): partial coverage when mix of detected+not_detected; add bulk recalculate endpoint

2026-06-18 17:05:15 +02:00

test_techniques.py

fix(lint): remove trailing whitespace from blank lines in test files

2026-06-12 11:00:42 +02:00

test_template_count_endpoint.py

feat(templates): add pagination with total counts to catalog and campaign picker

2026-07-16 10:01:20 +02:00

test_template_existing_test_count.py

feat(backend): enforce campaign scheduling, add reviewer queue filter, tactic order, duplicate-test counts

2026-07-08 08:46:09 +02:00

test_templates_crud.py

feat(templates): add pagination with total counts to catalog and campaign picker

2026-07-16 10:01:20 +02:00

test_tempo_service.py

fix: multiple test-workflow bugs — draft wipe, dark date pickers, Jira status strings, Tempo gate, hold timer

2026-07-10 15:24:19 +02:00

test_test_assignee_username.py

feat(tests): add team queue overview section for leads

2026-07-14 11:03:17 +02:00

test_test_edit_assignee_lock.py

fix(tests): pause reopen timer, lock edits to assignee, restore Jira operator on reopen

2026-07-13 10:53:10 +02:00

test_test_entity.py

fix(tests): pause reopen timer, lock edits to assignee, restore Jira operator on reopen

2026-07-13 10:53:10 +02:00

test_test_list_filters.py

feat(tests): richer server-side filters + true total count for GET /tests

2026-07-09 12:45:05 +02:00

test_tests.py

fix(permissions): admin can no longer operate tests — start/submit/edit/create, view only

2026-07-13 09:27:43 +02:00

test_threat_actor_entity.py

feat: add ThreatActorEntity domain entity with coverage analysis (Tier 4)

2026-02-20 15:02:38 +01:00

test_user_api_validation.py

fix(users): add manager to the valid-role whitelist

2026-07-15 14:16:27 +02:00

test_value_objects.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

test_workflow.py

fix(tests): keep free-text round fields in place on reopen, only blank verdicts

2026-07-13 12:46:46 +02:00

test_worklog_service.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:33:40 +02:00