feat(pos): add manager authorization and resolve frontend lint issues by CFBruna · Pull Request #84 · CFBruna/petcare_project

CFBruna · 2026-02-17T02:43:17Z

What's New

Implemented AuditLog model in accounts app to track sensitive actions.
Added AuthorizeActionView API endpoint for manager authorization.
Frontend: Added ManagerAuthModal to protect "Remove Item" and "Apply Discount" actions in POS.
Frontend: Fixed critical bug where 401 errors caused infinite redirect loops (changed to 403 handling).
Frontend: Resolved all ESLint errors, including any type usage, useEffect dependencies, and synchronous state updates in CurrencyInput.
Frontend: Improved type safety in POSPage, Sales, and CheckoutModal.
Registered AuditLog in Django Admin with full translations.
Updated bandit configuration and fixed backend test assertions.

Why

Security: To prevent unauthorized discounts and item removals by cashiers, requiring manager approval.
Auditability: To keep a detailed log of who authorized sensitive actions and why.
Code Quality: To ensure a clean, type-safe, and maintainable codebase by resolving all linting and static analysis issues.
Bug Fixes: To improve user experience by preventing app crashes and redirect loops.

Testing

Unit tests updated for Service Layer and Authorization views (pytest).
Manual test: Verify "Remove Item" triggers Manager Auth Modal in POS.
Manual test: Verify "Apply Discount" triggers Manager Auth Modal in POS.
Manual test: Confirm valid credentials allow action and create Audit Log entry.
Manual test: Confirm invalid credentials show error without page reload.
Manual test: Verify npm run lint and npm run build pass without errors.

Checklist

Code follows Service Layer architecture
No logic in Views/Admin
MyPy strict compliance (for new files)
Ruff linting passed

…zed i18n

…guage aliases

…or full-width visualization

…ly/lifetime stats

…dding

…transparency

…tication

…n Intl

…translations

…pping

…submits form

… version prefixes

- Add discount field to Sale model\n- Update SaleService and SaleSerializer to handle discounts\n- Add discount input and reactive calculations to CheckoutModal\n- Connect POSPage to discount functionality

…te with currency formatting

…screpancy tracking, and currency masking

- Fix Textarea import in ManagerAuthModal - Remove explicit any from catch blocks in multiple files - Fix actionTypes type definition in use-toast.ts - Fix useEffect dependencies in CurrencyInput, Sales, and others - Fix fetchSales definition order in Sales.tsx - Remove unused variables and imports - Ensure production build passes

- Relax Customer __str__ assertion for users without names - Fix create_customer arguments in test_services - Update bandit exclude patterns in pyproject.toml

- Update authlib to >=1.6.6 (CVE-2025-68158) - Update pyasn1 to >=0.6.2 (CVE-2026-23490) - Update virtualenv to >=20.36.1 (CVE-2026-22702)

CFBruna added 30 commits February 12, 2026 21:00

fix(backend): correct date logic in backfill script

52f249e

feat(analytics): implement trend calculation and period comparison

3529b79

feat(core): add global configuration API for i18n and timezone

6ef58fa

fix(store): resolve missing imports and Sale model referencing errors

2c85227

feat(frontend): implement robust configuration provider and standardi…

8c8197d

…zed i18n

feat(ui): integrate real dashboard metrics and timezone-aware formatting

33ad996

fix(i18n): ensure reliable dynamic language switching and support lan…

e20a075

…guage aliases

feat(dashboard): implement performance chart and restructure layout f…

4532eb1

…or full-width visualization

feat(analytics): fix missing metrics in dashboard and add today/month…

f9facb0

…ly/lifetime stats

feat(analytics): add comparative trends for monthly and annual metrics

31844ee

style(dashboard): reorder metrics cards and refine header spacing

70b4125

style(dashboard): further reduce header spacing and compact Layout pa…

6b2d059

…dding

feat(auth): implement logout functionality with redirection to login

eaeacf4

feat(auth): increase login logo size for better visibility

60fb64f

fix(auth): improve mobile responsiveness and fix layout repetition

89ace16

fix(auth): fix ghosting login screen caused by fixed positioning and …

e1afe1a

…transparency

fix(auth): adjust tab order to flow from email to password field

9d3d2f3

feat(auth): restore backend permissions and integrate frontend authen…

c9639ae

…tication

fix(dashboard): attach auth token to dashboard api requests

c4947ec

fix(ui): use currency symbol from backend config instead of relying o…

a4aac17

…n Intl

chore(infra): add seed-db command and improve makefile robustness

d942298

fix(dashboard): resolve currency formatting issues in charts and add …

a16fb5f

…translations

fix(dashboard): remove space in currency format and prevent chart cli…

4ab9ad9

…pping

feat(auth): implement remember me functionality and ensure enter key …

440fa4f

…submits form

fix(dashboard): implement view all activities button and sales page

dec98ab

fix(sales): handle paginated response

735539c

feat(sales): add product details to sales list

3cae62d

feat(pos): implement layout, categories, cart logic, and auto-close

9f90b6b

refactor(layout): remove global search bar

b32b0c1

chore(assets): add project logos

05568b6

CFBruna added 28 commits February 13, 2026 23:03

refactor(frontend): standardize api client usage and remove redundant…

d0dbb4b

… version prefixes

refactor(accounts): extract quick registration logic to service layer

c0b561f

chore(makefile): enhance start/stop process management

f00494b

fix(store): enforce dynamic currency decimals from settings

4bf93a4

feat(sales): implement sales history with filtering

ff89bec

feat(pos): update cart styling and checkout components

91305dd

feat(store): implement split payment support and validation

d50ac16

feat(pos): add split payment ui with proper i18n

012029b

feat(pos): implement global discounts on sale checkout

5eb0245

- Add discount field to Sale model\n- Update SaleService and SaleSerializer to handle discounts\n- Add discount input and reactive calculations to CheckoutModal\n- Connect POSPage to discount functionality

feat(store): implement cash management models and services

8cc259a

feat(admin): register cash management models in custom PetCareAdminSi…

cc6cde2

…te with currency formatting

feat(i18n): add cash management translations for PT-BR and ES

3b22e00

feat(pos): implement cash management UI including opening/closing, di…

d8e1261

…screpancy tracking, and currency masking

feat(store): implement sale fiscal preparation and validation

4a67d2f

feat(pos): implement thermal receipt printing and checkout refinements

22a8820

style: apply linting and formatting fixes

dc6b5e7

feat(store): implement cash session management and fiscal data support

450cd2f

feat(backend): add AuditLog model and fix Customer string representation

11401cb

feat(backend): implement manager authorization endpoint

3ea6f65

feat(admin): register AuditLog with translations

332783c

feat(frontend): implement manager authorization components

228792b

feat(pos): integrate manager auth and fix checkout translations

523574b

style: apply ruff formatting

dbb20c7

fix(tests): resolve unused variable and formatting issues

9fcd8b0

fix(tests): resolve currency formatting and service usages

2148d60

fix(backend): update tests and bandit config

501beb9

- Relax Customer __str__ assertion for users without names - Fix create_customer arguments in test_services - Update bandit exclude patterns in pyproject.toml

fix(deps): update authlib, pyasn1, virtualenv to resolve CVEs

b310176

- Update authlib to >=1.6.6 (CVE-2025-68158) - Update pyasn1 to >=0.6.2 (CVE-2026-23490) - Update virtualenv to >=20.36.1 (CVE-2026-22702)

CFBruna merged commit 592e3d0 into v2/monorepo-migration Feb 17, 2026
1 check passed

CFBruna deleted the feature/frontend-public-pages branch February 17, 2026 19:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(pos): add manager authorization and resolve frontend lint issues#84

feat(pos): add manager authorization and resolve frontend lint issues#84
CFBruna merged 62 commits intov2/monorepo-migrationfrom
feature/frontend-public-pages

CFBruna commented Feb 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

CFBruna commented Feb 17, 2026

What's New

Why

Testing

Checklist

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant