dripsmvcp e4e64ec82f fix(sharing): scope import account selects to accessible_by (#1803) ...

Three CSV / QIF account selects in import/uploads/show.html.erb and one
PDF-import account select in imports/_pdf_import.html.erb pulled their
options from `@import.family.accounts`. That listed every account in
the family — including the family admin's unshared personal accounts —
in the dropdown shown to any member running an import. Swap each call
site to `Current.user.accessible_accounts` (owned + explicitly shared
accounts only), matching the existing scoping used by the dashboard
sidebar, transactions controller, transfers controller, etc.

Adds a regression test that signs in as family_member and asserts the
unshared-account names from the dylan_family fixtures never appear in
the rendered upload page.

2026-06-05 10:28:43 +09:00

..

cleans_controller_test.rb

CSV Imports Overhaul (Transactions, Trades, Accounts, and Mint import support) (#1209)

2024-10-01 10:47:59 -04:00

configurations_controller_test.rb

Fix import configuration form so number format is applied (#1923)

2025-02-28 08:36:57 -05:00

confirms_controller_test.rb

CSV Imports Overhaul (Transactions, Trades, Accounts, and Mint import support) (#1209)

2024-10-01 10:47:59 -04:00

mappings_controller_test.rb

CSV Imports Overhaul (Transactions, Trades, Accounts, and Mint import support) (#1209)

2024-10-01 10:47:59 -04:00

rows_controller_test.rb

feat(api): expose import row diagnostics (#1644)

2026-05-05 01:12:48 +02:00

uploads_controller_test.rb

fix(sharing): scope import account selects to accessible_by (#1803)

2026-06-05 10:28:43 +09:00