f00cbf18d3
tests / pest (push) Failing after 7m59s
Details
tests / assets (push) Successful in 23s
Details
tests / release (push) Has been skipped
Details
The console could show them and not touch them, so a moved office or a new contact person meant impersonating the customer or editing the database by hand. Both are worse than a form. R20: a modal, opened from the Stammdaten tab, authorising again and reading the record itself rather than trusting anything the browser hydrated. Most of the work is in what saving must NOT quietly do. The customer type is never reset to "nobody asked". The field opens on "leave unchanged" precisely so that saving an address correction cannot undo it — that answer decides whether a withdrawal right exists, and losing it silently would be the expensive kind of quiet. A changed VAT number is unverified from the moment it is stored — the verification is bound to the value, so that happens by itself — but `vat_id_verified_value` is left alone: it is the record of what WAS checked, and clearing it would destroy the evidence rather than the claim. The address is also the sign-in address and the key inbound mail is matched by, so changing it moves the linked portal login in the same transaction and puts it back to unverified, which is what Laravel's own profile update does for the same reason: nobody has shown they can read the new address. No mail is sent from here — the portal asks for the confirmation at the next sign-in, and a mail an operator did not knowingly send is a surprise. Three addresses are refused: one belonging to an operator (R21 — no index spans the two tables, so it is checked), one belonging to another customer, and one belonging to somebody else's user row, which can outlive or predate a matching customer. Not offered here, each for its own reason: `status`, because suspending has consequences for access and a lifecycle switch hidden among address fields is one somebody flips by accident; `stripe_customer_id`, because a wrong one does not move a contract, it points our records at somebody else's payments; the brand fields, because the customer sets those for themselves and an operator overwriting a logo is not a correction. There is a test that fails if any of them appears — with the comments stripped first, since the class documents at length why they are absent and that documentation is not the offence. This repository has fallen into that trap three times. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| capacity.blade.php | ||
| confirm-delete-datacenter.blade.php | ||
| confirm-delete-incident.blade.php | ||
| confirm-delete-plan-draft.blade.php | ||
| confirm-delete-vpn-peer.blade.php | ||
| confirm-disable-two-factor.blade.php | ||
| confirm-end-other-sessions.blade.php | ||
| confirm-forget-secret.blade.php | ||
| confirm-reissue-vpn-peer.blade.php | ||
| confirm-remove-host.blade.php | ||
| confirm-restart-instance.blade.php | ||
| confirm-save-env.blade.php | ||
| confirm-save-secret.blade.php | ||
| customer-detail.blade.php | ||
| customers.blade.php | ||
| datacenters.blade.php | ||
| edit-customer.blade.php | ||
| edit-datacenter.blade.php | ||
| edit-export-target.blade.php | ||
| edit-invoice-series.blade.php | ||
| edit-mail-template.blade.php | ||
| edit-plan-family.blade.php | ||
| finance.blade.php | ||
| grant-plan.blade.php | ||
| host-create.blade.php | ||
| host-detail.blade.php | ||
| hosts.blade.php | ||
| inbox.blade.php | ||
| incidents.blade.php | ||
| instance-admin-access.blade.php | ||
| instances.blade.php | ||
| integrations.blade.php | ||
| invoices.blade.php | ||
| mail-log.blade.php | ||
| mail-templates.blade.php | ||
| mail.blade.php | ||
| maintenance.blade.php | ||
| new-invoice.blade.php | ||
| overview.blade.php | ||
| plan-versions.blade.php | ||
| plans.blade.php | ||
| provisioning.blade.php | ||
| record-withdrawal.blade.php | ||
| revenue.blade.php | ||
| settings.blade.php | ||
| two-factor-setup.blade.php | ||
| vpn-config-access.blade.php | ||
| vpn.blade.php | ||