User:Ryan52/old todo

o hai

Because I don't like trac. I probably don't like any project management program for that matter. Using this because I loose TODO files on my system too easily. :p

features wanted

list of features wanted, most from a discussion with kc8pxy (some will be taken care of by him/his coders), others need my help. and the first two are from us.

• settings page (admin password, everything in the defaults table, metadata too..)
• 01:17 <kc8pxy> volunteer certification trancking
  • 01:17 <Ryan52> aka contact_types? :)
  • 01:18 <kc8pxy> btu i don't want unilateral designation.
  • 01:18 <kc8pxy> i want to have 2 or 3 people to "vote" them competent.

todo list - a bunch of crap that nobody cares about

REALLY IMPORTANT

• I think I forgot to set up the volunteer milestone report and the remove sessions script after I moved to the new server

i'm working on

• vhost based routes for separating fgdb and library, and having a setup page. I'm working on this at a glaciers pace, but I'm still working on it. (integrated with settings page, sort of)
• library
• reports over time

current sprint

• update the release scripts for git (IMPORTANT!!! because I'm really stupid sometimes)
• coveredness without contracts is broken -- no big deal
• speed up the regex in the vhosting stuff wrt printme, so that it caches results.
• disable certain gizmo_types
• deadbeat discounts weren't setting occured_at -- fixed, but need to clean up data again...
• gizmo_types changes (#581)
• covered report

for next sprint

• finish library stuff
• update the documentation (meh, not *that* important)
• use a fgdb-container with a submodule to the real thing, with the current branch
• add notes via gui
• switch to rspec
  • and get tests that work
• "power user" multiple systems per line item
• security fixing
  • CSRF (use rails' protect_from_forgery and verify methods)
    • Look at this: [1] looks really kewl!
  • check for SQL injection, we won't have to worry about this in most places since we use active record, but the reports where we use SQL directly should be checked.
  • Rails Security Guide

things left for git

• gitweb on devo (currently have it on my vps...)
• trac (or switch to ticgit)
• cruise control (useless since all of the tests are broken)
• rewrite the commit email script -- it sucks (I can live with it now)
• figure out somewhere for the devel data to live that is faster than the horrible freegeek dsl (maybe on my home server?) (I don't care -- sneakernet ftw!)
• ticgit

should do soonish

• make it work with rails 2.2.2

for a rainy day

• look closer at the XSS stuff (safe erb) -- I got a lot of em
  • the on_display stuff for contact searches is an XSS bug, sort of. regardless, it should be cleaned up.
• remove cruft from that ajax helper thing
• get rid of duplicated data in code
  • conditions stuff is all over the place
  • permissions for various controllers are split between the sidebar and the controller itself
• fgss generic regexps
• move the vendor/plugins to their own submodules...maybe I shoulda done this first, since it's gonna get even more messy with the git bug...anyway, too late for that, whatever. I'll work it out :)
  • update them

what I did today

Moved to ChangeLog