Fringg 1646f04bde fix: address RBAC review findings (CRITICAL + HIGH) ...

- stats:read → remnawave:manage for node restart/toggle (CRITICAL)
- add is_system guard on role update endpoint
- add Query bounds on /users limit/offset (ge/le)
- add db.rollback() in bootstrap exception handler
- migration: default=0 → server_default for level/priority columns
- CSV export: add formula injection sanitization

2026-02-25 03:17:06 +03:00

..

contests

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

menu_layout

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

payment

feat: add multi-channel mandatory subscription system

2026-02-24 02:50:31 +03:00

__init__.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

admin_notification_service.py

fix: improve campaign notifications and ticket media in admin topics

2026-02-25 00:44:44 +03:00

backup_service.py

refactor: remove legacy app-config.json system

2026-02-24 05:58:25 +03:00

ban_notification_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

blacklist_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

blocked_users_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

broadcast_service.py

style: ruff format

2026-02-23 21:29:54 +03:00

bulk_ban_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

campaign_service.py

fix: prevent partner self-referral via own campaign link

2026-02-23 18:02:25 +03:00

channel_subscription_service.py

feat: add per-channel disable settings and fix CHANNEL_REQUIRED_FOR_ALL bug

2026-02-25 00:24:31 +03:00

cloudpayments_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

contest_rotation_service.py

feat: add multi-channel mandatory subscription system

2026-02-24 02:50:31 +03:00

daily_subscription_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

disposable_email_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

event_emitter.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

external_admin_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

faq_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

freekassa_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

kassa_ai_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

log_rotation_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

main_menu_button_service.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

maintenance_service.py

fix: add naive datetime guards to fromisoformat() in Redis cache readers

2026-02-17 07:52:26 +03:00

menu_layout_service.py

chore: add uv package manager and ruff linter configuration

2026-01-24 17:45:27 +03:00

monitoring_service.py

style: format monitoring_service.py

2026-02-24 03:30:00 +03:00

mulenpay_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

nalogo_queue_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

nalogo_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

notification_delivery_service.py

feat: blocked user detection during broadcasts, filter blocked from all notifications

2026-02-17 18:37:25 +03:00

notification_settings_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

pal24_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

partner_application_service.py

fix: medium-priority fixes for partner system

2026-02-17 12:42:40 +03:00

partner_stats_service.py

fix: medium-priority fixes for partner system

2026-02-17 12:42:40 +03:00

payment_method_config_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

payment_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

payment_verification_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

permission_service.py

feat: add RBAC + ABAC permission system for admin cabinet

2026-02-25 03:02:40 +03:00

pinned_message_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

platega_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

poll_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

privacy_policy_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

promo_group_assignment.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

promo_offer_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

promocode_service.py

feat: blocked user detection during broadcasts, filter blocked from all notifications

2026-02-17 18:37:25 +03:00

public_offer_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

rbac_bootstrap_service.py

fix: address RBAC review findings (CRITICAL + HIGH)

2026-02-25 03:17:06 +03:00

referral_contest_service.py

feat: add multi-channel mandatory subscription system

2026-02-24 02:50:31 +03:00

referral_diagnostics_service.py

feat: add campaign_id to ReferralEarning for campaign attribution

2026-02-18 09:12:01 +03:00

referral_service.py

fix: add int32 overflow guards and strengthen auth validation

2026-02-23 18:12:58 +03:00

referral_withdrawal_service.py

style: format admin_campaigns, admin_partners, referral_withdrawal_service

2026-02-18 08:13:04 +03:00

remnawave_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

remnawave_sync_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

remnawave_webhook_service.py

fix: restore subscription_url and crypto_link after panel sync

2026-02-24 23:50:21 +03:00

reporting_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

server_status_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

startup_notification_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

subscription_auto_purchase_service.py

feat: blocked user detection during broadcasts, filter blocked from all notifications

2026-02-17 18:37:25 +03:00

subscription_checkout_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

subscription_purchase_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

subscription_renewal_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

subscription_service.py

fix: add missing broadcast_history columns and harden subscription logic

2026-02-23 19:07:59 +03:00

support_settings_service.py

fix: sync SUPPORT_SYSTEM_MODE between SystemSettings and SupportSettings

2026-02-16 18:22:44 +03:00

system_settings_service.py

refactor: remove legacy app-config.json system

2026-02-24 05:58:25 +03:00

traffic_monitoring_service.py

fix: add naive datetime guards to fromisoformat() in Redis cache readers

2026-02-17 07:52:26 +03:00

trial_activation_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

tribute_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

user_cart_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

user_service.py

fix: protect active paid subscriptions from being disabled in RemnaWave

2026-02-23 16:49:31 +03:00

version_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

wata_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

web_api_token_service.py

style: apply ruff formatting

2026-02-18 08:11:33 +03:00

webhook_service.py

refactor: complete structlog migration with contextvars, kwargs, and logging hardening

2026-02-16 09:18:12 +03:00

wheel_service.py

fix: complete datetime.utcnow() → datetime.now(UTC) migration

2026-02-17 04:45:40 +03:00

yookassa_service.py

feat: add multi-channel mandatory subscription system

2026-02-24 02:50:31 +03:00