micro-users 1.8.2__py3-none-any.whl → 1.8.4__py3-none-any.whl

{micro_users-1.8.2.dist-info → micro_users-1.8.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: micro-users
-Version: 1.8.2
+Version: 1.8.4
 Summary: Arabic Django user management app with abstract user, permissions, and activity logging
 Home-page: https://github.com/debeski/micro-users
 Author: DeBeski
@@ -214,3 +214,5 @@ MICRO_USERS_THEME = {
 | v1.8.0   | • **Permissions UI**: Complete redesign with App/Model-based grouping and hierarchical checkboxes<br>• **Aesthetics**: Applied modern glassmorphism theme to permission cards with interactive toggles<br>• **Security**: Implemented 3-level security logic (GM, SM, User) and "invisible" Superuser protection<br>• **Foolproofing**: Added self-editing protection for staff and scope enforcement for managers<br>• **Localization**: Fully translated system auth labels and metadata to Arabic |
 | v1.8.1   | • **UI Refinement**: Swapped `Email` and `Phone` positions across all forms, tables, and detail views<br>• **Field Logic**: Set `Email` and `Phone` as optional (not required) for all users<br>• **Security**: Added `manage_staff` custom permission to restrict `is_staff` management to authorized managers only<br>• **Bug Fix**: Reserved `manage_staff` assignment power strictly for Superusers and fixed UI grouping for custom permissions |
 | v1.8.2   | • **Login UX**: Enhanced login flow with auto-focus on username and improved "Enter to Submit" handling |
+| v1.8.3   | • **CSP Compliance**: Added `nonce` attribute support to all inline and external script tags (Login, Permissions, Manage Users) for Content Security Policy compliance |
+| v1.8.4   | • **Strict CSP**: Refactored inline JS event handlers to use Event Listeners, fully resolving CSP violation errors |

{micro_users-1.8.2.dist-info → micro_users-1.8.4.dist-info}/RECORD

@@ -21,9 +21,9 @@ users/static/users/css/permissions.css,sha256=b5XwKZKqJvU8iTlSC8P2EIDflSUb-0PP-O
 users/static/users/css/profile.css,sha256=AZVDK0gFwGo0vgPrmZ0BJVAxax8Icf2h8WFVNbt1UeU,2908
 users/static/users/css/style.css,sha256=rlLk1P4uxw9TKwsFTmXR77gYy0bVptwjzO_m3VGlYDo,1789
 users/static/users/js/login.js,sha256=PmUXzsb1OYKne6XPZwolbTLWEZsl77J0pgRYakam1Wg,883
-users/static/users/js/permissions.js,sha256=v2h5JKAdhXYoLwOEK6hc82MWqbKS_zcUVQgFPKC3vV0,3658
-users/templates/registration/login.html,sha256=Ok9BEEBKjevbJVhEta_UC66LssNviefhpjoslhrdiFc,2926
-users/templates/users/manage_users.html,sha256=tIPkdFxm9lC_R184WQlm0UHV7sUS_xNo6f8AjgW18S8,6359
+users/static/users/js/permissions.js,sha256=ILGKe8sNYS4p-dW-hAzhZ29UKSJwntw3B2NLciwR_Uk,3884
+users/templates/registration/login.html,sha256=P-oUVjO6dd9AYJ_fAkGuJQm6JflqrAoVz7oAzvJYLbY,2958
+users/templates/users/manage_users.html,sha256=wsvij8DzgP3NHD-dkibKUwg3Uj0lWMaAAapqpT4CHBk,6673
 users/templates/users/user_activity_log.html,sha256=nKVOvmkbVjGWZZyYNJahs7drWQFh_hvyUDWuauwJV6U,571
 users/templates/users/user_detail.html,sha256=FAPQYXr5qNgzaZ-mAnaNoCb8dVsUHtj_hY87ZYO9_d0,5302
 users/templates/users/user_form.html,sha256=jcyI7OQZOY4ue4DajPtfjAt2SmAYO5ZgHNOqTp2-FO0,1352
@@ -33,9 +33,9 @@ users/templates/users/partials/scope_manager.html,sha256=mqhSg2NA2U_Dc5bIf3OUasT
 users/templates/users/partials/user_actions.html,sha256=J44-sn0fMbLUWjdtlcf5YhgT5OYRykr1mFkeVXoI1ew,1543
 users/templates/users/profile/profile.html,sha256=HXxOWsGEAZb731iF-nY00dzbFcgVh60oF0C1X8AySb4,5377
 users/templates/users/profile/profile_edit.html,sha256=hhltTIdl62NNX290nFNZcQwbW1idXEU_DYlrAp07MWk,5242
-users/templates/users/widgets/grouped_permissions.html,sha256=y608c0rJlj73XBmZBNzjTbNlF7dlJf4AceN_g0mCbmA,4087
-micro_users-1.8.2.dist-info/LICENSE,sha256=Fco89ULLSSxKkC2KKnx57SaT0R7WOkZfuk8IYcGiN50,1063
-micro_users-1.8.2.dist-info/METADATA,sha256=_Dh-lrkRgm9txb5DrEZ94vI9dJvhSqYH2owxzvIuz-U,11117
-micro_users-1.8.2.dist-info/WHEEL,sha256=pkctZYzUS4AYVn6dJ-7367OJZivF2e8RA9b_ZBjif18,92
-micro_users-1.8.2.dist-info/top_level.txt,sha256=tWT24ZcWau2wrlbpU_h3mP2jRukyLaVYiyHBuOezpLQ,6
-micro_users-1.8.2.dist-info/RECORD,,
+users/templates/users/widgets/grouped_permissions.html,sha256=4xhrCnp7UxkZetTU9sezVRZaSn61-Ar9iCbdtufGSis,4100
+micro_users-1.8.4.dist-info/LICENSE,sha256=Fco89ULLSSxKkC2KKnx57SaT0R7WOkZfuk8IYcGiN50,1063
+micro_users-1.8.4.dist-info/METADATA,sha256=yQDP4uZAybtCQWkpps9MsZr8D2wXyUTDrY59q1rsHeg,11433
+micro_users-1.8.4.dist-info/WHEEL,sha256=pkctZYzUS4AYVn6dJ-7367OJZivF2e8RA9b_ZBjif18,92
+micro_users-1.8.4.dist-info/top_level.txt,sha256=tWT24ZcWau2wrlbpU_h3mP2jRukyLaVYiyHBuOezpLQ,6
+micro_users-1.8.4.dist-info/RECORD,,

users/static/users/js/permissions.js

@@ -82,4 +82,11 @@ document.addEventListener('DOMContentLoaded', function() {
     // Initial State Sync
     document.querySelectorAll('.model-group').forEach(group => updateModelMasterStatus(group));
     document.querySelectorAll('.permissions-card').forEach(card => updateAppMasterStatus(card));
+
+    // Prevent toggle propagation for specific elements
+    document.querySelectorAll('.prevent-toggle').forEach(el => {
+        el.addEventListener('click', function(e) {
+            e.stopPropagation();
+        });
+    });
 });

users/templates/registration/login.html

@@ -58,5 +58,5 @@
     </div>
   </div>
 
-<script src="{% static 'users/js/login.js' %}"></script>
+<script src="{% static 'users/js/login.js' %}" nonce="{{ request.csp_nonce }}"></script>
 {% endblock %}

users/templates/users/manage_users.html

@@ -21,7 +21,7 @@
 
     <div class="mt-3">
         {% if not request.user.scope %}
-        <button type="button" class="btn btn-info no-print" title="إدارة النطاقات" onclick="loadScopeManager()">
+        <button type="button" class="btn btn-info no-print" title="إدارة النطاقات" id="btn-manage-scopes">
             <i class="bi bi-list me-1 h4"></i> إدارة النطاقات
         </button>
         {% endif %}
@@ -74,7 +74,7 @@
     </div>
 
     <!-- Script for Scope Modal -->
-    <script>
+    <script nonce="{{ request.csp_nonce }}">
         // Defined globally so they can be called from injected HTML
         function loadScopeManager() {
             const modal = new bootstrap.Modal(document.getElementById('scopeModal'));
@@ -134,6 +134,13 @@
             })
             .catch(err => console.error('Error deleting scope:', err));
         }
+
+        document.addEventListener('DOMContentLoaded', function() {
+            const btnManageScopes = document.getElementById('btn-manage-scopes');
+            if (btnManageScopes) {
+                btnManageScopes.addEventListener('click', loadScopeManager);
+            }
+        });
     </script>
 {% endblock %}
 

users/templates/users/widgets/grouped_permissions.html

@@ -14,7 +14,7 @@
                  aria-expanded="false">
                 
                 <div class="d-flex align-items-center">
-                    <div class="form-check me-3" onclick="event.stopPropagation()">
+                    <div class="form-check me-3 prevent-toggle">
                         <input class="form-check-input app-master-checkbox" type="checkbox" id="master_{{ app_label }}">
                         <label class="form-check-label d-none" for="master_{{ app_label }}">تحديد الكل</label>
                     </div>
@@ -71,5 +71,5 @@
     </div>
 </div>
 
-<script src="{% static 'users/js/permissions.js' %}"></script>
+<script src="{% static 'users/js/permissions.js' %}" nonce="{{ request.csp_nonce }}"></script>
 {% endwith %}