maziggy b8b5aaa977 feat(api-keys): can_manage_maintenance scope for HA-style automations (#1832 follow-up) ...

Carve MAINTENANCE_CREATE/UPDATE/DELETE out of the admin denylist so
    HA automations can log "cleaned nozzle" / reset a counter via API key
    without granting broader printer control. Follows the same shape as
    can_manage_library and can_manage_inventory: new column, allowlist
    entry, UI checkbox, wiki row, RBAC test coverage.

    Distinct backfill: these perms were EXPLICITLY denied for every API
    key before this change (no existing integration relies on them), so
    existing rows migrate to FALSE — no silent scope widening on upgrade.
    New keys default to TRUE, matching the safe-on-by-default pattern.
    Bundled SpoolBuddy kiosk key gets False explicitly (kiosk doesn't need it).

2026-07-07 10:58:09 +02:00

..

__init__.py

…

test_advanced_auth_api.py

…

test_ams_history_api.py

…

test_ams_labels_api.py

…

test_api_key_cloud_access.py

fix(api-keys): slice + slicer-presets routes resolve cloud token via key owner (#1182 follow-up)

2026-05-02 08:10:47 +02:00

test_archive_purge_api.py

fix(archives): bulk and auto purge now honour the soft / hard delete choice from #1343 (#1390 follow-up)

2026-05-17 10:54:28 +02:00

test_archives_api.py

Resolved conflicts

2026-06-14 10:52:41 +02:00

test_auth_api.py

fix(auth): expose /api/v1/system/appliance through the auth middleware allowlist

2026-06-25 15:19:28 +02:00

test_auth_apikey_rbac.py

feat(api-keys): can_manage_maintenance scope for HA-style automations (#1832 follow-up)

2026-07-01 09:21:09 +02:00

test_available_filaments.py

…

test_background_dispatch_api.py

feat: Unify print dispatch through the scheduler (#1625)

2026-06-26 12:31:48 +02:00

test_camera_api.py

fix(printers): cam wall — offline tile chip + don't kill shared

2026-06-26 16:01:28 +02:00

test_client_ip.py

…

test_cloud_auth.py

…

test_color_catalog_extras.py

fix(queue): extend Charcoal-style label fix to Specific-Printer panel (#1718 round 3)

2026-06-11 14:49:52 +02:00

test_color_map_api.py

…

test_cost_statistics.py

fix(cost): top-up untracked filament at default rate so multi-color

2026-05-15 15:43:37 +02:00

test_discovery_api.py

…

test_endpoint_auth.py

…

test_external_folders_api.py

fix(security): WebSocket auth gate + audit-driven hardening sweep

2026-06-02 10:02:17 +02:00

test_external_links_api.py

…

test_filaments_api.py

…

test_gcode_viewer.py

fix(docker): copy gcode_viewer assets into the production image (issue #1218)

2026-05-06 14:23:39 +02:00

test_github_backup_api.py

security(github-backup): refuse to save against a non-private repository

2026-05-17 15:30:05 +02:00

test_groups_api.py

…

test_inventory_assign.py

fix(inventory): handle PFCN cloud preset IDs in assign-via-MQTT (#1648)

2026-06-06 10:17:09 +02:00

test_inventory_bulk.py

feat(inventory): batch / mass edit on the Filament tab (#1795)

2026-06-23 11:34:15 +02:00

test_inventory_csv.py

feat(inventory): CSV import/export for the inventory page (#1576) (#1659)

2026-06-08 09:30:16 +02:00

test_inventory_from_slot_no_tag.py

fix(inventory): stop popping the unknown-tag modal for slots with no RFID

2026-06-25 09:57:15 +02:00

test_labels.py

fix(labels): replace incorrect ams_30x15 preset with correct AMS holder sizes (#1426)

2026-05-19 13:14:03 +02:00

test_ldap_group_sync.py

fix(auth): preserve manually-assigned groups across LDAP logins (#1292)

2026-05-12 16:12:58 +02:00

test_ldap_provision.py

chore(tests): allowlist GitGuardian-flagged test fixtures in test_ldap_provision

2026-05-15 12:15:39 +02:00

test_library_api.py

fix(auth): API keys with Manage Library can curate library files (#1832)

2026-06-27 09:47:35 +02:00

test_library_slice_api.py

fix(slicer): surface real CLI rejections + hard-skip mismatched filaments in auto-pick (#1851)

2026-06-29 08:23:29 +02:00

test_library_tags_api.py

feat(file-manager): user-authored tags for cross-cutting filtering (#1268)

2026-06-22 12:27:58 +02:00

test_library_trash_api.py

Tool: Bandit B108

2026-05-11 13:30:27 +02:00

test_local_login_gate.py

feat(auth): SSO autologin + disable local username/password login (#1589)

2026-06-25 14:54:27 +02:00

test_locations_api.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

test_long_lived_tokens_api.py

…

test_maintenance_api.py

fix(maintenance): #1596 persist wiki_url on Custom Type create + correct

2026-06-02 14:58:10 +02:00

test_makerworld_apikey_auth.py

fix(makerworld): resolve API-key owner for cloud-token lookups (#1777)

2026-06-19 08:05:20 +02:00

test_metrics_api.py

…

test_mfa_api.py

fix(oidc): #1569 populate User.email from standard 'email' claim when email_claim is preferred_username

2026-06-02 10:23:21 +02:00

test_notifications_api.py

…

test_obico_api.py

…

test_oidc_icon_api.py

Post work PR #1333

2026-05-15 08:57:03 +02:00

test_oidc_icon_blob_roundtrip.py

feat(auth): proxy OIDC provider icons server-side (#1333) (#1342)

2026-05-15 08:50:37 +02:00

test_oidc_icon_deferred_load.py

feat(auth): proxy OIDC provider icons server-side (#1333) (#1342)

2026-05-15 08:50:37 +02:00

test_oidc_relogin.py

fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)

2026-05-13 13:23:21 +02:00

test_ownership_permissions.py

fix(queue): ownership gates + TOCTOU lock + /reorder validator (#1625-followup)

2026-06-26 13:06:40 +02:00

test_pending_upload_display_name.py

Tool: Bandit B108

2026-05-11 13:30:27 +02:00

test_pipeline_runs_api.py

fix(permissions): self-heal Administrators to ALL_PERMISSIONS on upgrade + Pipelines runs dashboard polish

2026-06-28 11:18:18 +02:00

test_print_lifecycle.py

fix(scheduler): raise plate-clear gate for every terminal status (#1171)

2026-05-01 08:13:52 +02:00

test_print_queue_api.py

test: silence Bandit B108 on hardcoded /tmp test-fixture paths

2026-06-28 13:52:05 +02:00

test_printers_api.py

fix(hms): wrong-plate Ignore actually ignores + buttons read as buttons + ack-detection survives transient re-pause (#1869)

2026-06-29 10:59:29 +02:00

test_projects_api.py

fix(stats): #1593 multi-plate parser + per-run project rollup + carry-over system totals + accuracy band

2026-06-02 13:35:06 +02:00

test_queue_start_user_attribution.py

test(security-fixtures): nosec B104/B108 on new 0.2.4.6 test code

2026-06-09 13:32:15 +02:00

test_read_permission_backfill_migration.py

fix(permissions): self-heal Administrators to ALL_PERMISSIONS on upgrade + Pipelines runs dashboard polish

2026-06-28 11:18:18 +02:00

test_security_headers.py

fix(csp): nonce-based script-src so Cloudflare-injected scripts pass (#1460 follow-up)

2026-05-23 12:28:58 +02:00

test_security.py

fix(security): GHSA-6mf4-q26m-47pv — fail-closed on auth-probe DB errors (CVSS 9.8)

2026-05-30 13:49:09 +02:00

test_session_policy.py

feat(auth): admin-configurable session lifetime ceiling (#1706)

2026-06-16 12:00:27 +02:00

test_settings_api_key_scrubbing.py

fix(spoolbuddy): lower /update permission to INVENTORY_UPDATE so kiosk's own Settings -> Update button works

2026-05-08 14:28:41 +02:00

test_settings_api.py

feat(settings): split API slicer + Open-in-Slicer preferences (#1329)

2026-06-08 10:39:21 +02:00

test_settings_electricity_price.py

fix(api-keys): expose narrowly-scoped "Update electricity price" toggle (#1356)

2026-05-15 13:12:41 +02:00

test_settings_ui_preferences.py

feat(humidity): per-filament humidity threshold for auto-drying + alarms (#1605)

2026-06-21 11:55:37 +02:00

test_sjf_scheduling.py

…

test_slicer_pipelines_api.py

feat(slicer): Slicer Pipelines — save & reuse a preset bundle in one click (#1425 PR A)

2026-06-27 13:56:18 +02:00

test_smart_plugs_api.py

…

test_sponsor_prompt_api.py

feat(sponsor-prompt): in-app toast at earned milestones

2026-06-20 15:50:58 +02:00

test_spool_by_tag_lookup.py

feat(inventory): by-tag spool lookup, readable with Manage-Inventory keys (#1663) (#1700)

2026-06-22 10:14:31 +02:00

test_spool_reset_usage.py

refactor(inventory): rename /reset-usage to /reset-consumed-counter to match what it actually does (issue #1644)

2026-06-05 09:22:05 +02:00

test_spoolbuddy_spoolman_nfc.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolbuddy.py

fix(spoolbuddy): route weight sync by inventory mode exclusively (#1530)

2026-05-26 10:36:37 +02:00

test_spoolman_ams_sync.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_api.py

fix(spoolman): decide spool assignability from the slot-assignment ledger, not extra.tag (#1122)

2026-05-21 09:33:47 +02:00

test_spoolman_filament_patch.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

test_spoolman_inventory_api.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

test_spoolman_inventory_bulk.py

feat(inventory): batch / mass edit on the Filament tab (#1795)

2026-06-23 11:34:15 +02:00

test_spoolman_k_profiles.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

test_spoolman_slot_assignment_mqtt.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

test_spoolman_slot_assignments.py

fix(spool-assignments): union both assignment tables in the missing-spool check + symmetric mode-switch clear (#1473)

2026-05-21 09:15:10 +02:00

test_spoolman_slot_concurrency.py

fix(spoolman): clear stale fallback-tag links on assign + link, prefer slot-assignment over tag-link in UI (#1457)

2026-05-20 11:00:54 +02:00

test_spoolman_tracking_slot_fallback.py

fix(spoolman): per-print weight tracker falls back to local slot-assignment table for tag-less spools (#1459)

2026-05-20 11:16:56 +02:00

test_static_html_cache_headers.py

fix(tests): make SPA cache-header tests work without a built frontend

2026-05-05 14:35:08 +02:00

test_support_api.py

feat(system): log-health scanner + Add/Edit-Printer setup pre-flight

2026-05-22 16:31:16 +02:00

test_system_api.py

feat(system): NTP-gate state on /api/v1/system/appliance

2026-06-22 14:23:30 +02:00

test_tailscale_api.py

…

test_trace_middleware.py

…

test_updates_api.py

fix(updates): switch Windows installer installs to release-asset update flow

2026-06-21 10:25:57 +02:00

test_user_notifications_api.py

…

test_users_auth_cleanup.py

fix(auth): cleanup orphan OIDC/MFA rows when user is deleted (#1285) (#1295)

2026-05-13 13:23:21 +02:00

test_users_groups_privilege_escalation.py

test(users/groups): generate privilege-escalation test password at runtime

2026-06-12 13:27:17 +02:00

test_virtual_printer_api.py

feat(gcode-injection): per-VP opt-in auto-print injection toggle (#1516) (#1656)

2026-06-19 11:29:07 +02:00

test_webhook_printer_status.py

fix(webhook): #1584 PrinterState dataclass attribute access in status / stop / cancel

2026-06-02 12:57:51 +02:00

test_webhook_start_print.py

● fix(vp-queue): inherit slicer print options instead of always using defaults (#1403)

2026-05-18 09:38:53 +02:00