micro-users 1.8.3__py3-none-any.whl → 1.8.4__py3-none-any.whl

{micro_users-1.8.3.dist-info → micro_users-1.8.4.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: micro-users
-Version: 1.8.3
+Version: 1.8.4
 Summary: Arabic Django user management app with abstract user, permissions, and activity logging
 Home-page: https://github.com/debeski/micro-users
 Author: DeBeski
@@ -215,3 +215,4 @@ MICRO_USERS_THEME = {
 | v1.8.1   | • **UI Refinement**: Swapped `Email` and `Phone` positions across all forms, tables, and detail views<br>• **Field Logic**: Set `Email` and `Phone` as optional (not required) for all users<br>• **Security**: Added `manage_staff` custom permission to restrict `is_staff` management to authorized managers only<br>• **Bug Fix**: Reserved `manage_staff` assignment power strictly for Superusers and fixed UI grouping for custom permissions |
 | v1.8.2   | • **Login UX**: Enhanced login flow with auto-focus on username and improved "Enter to Submit" handling |
 | v1.8.3   | • **CSP Compliance**: Added `nonce` attribute support to all inline and external script tags (Login, Permissions, Manage Users) for Content Security Policy compliance |
+| v1.8.4   | • **Strict CSP**: Refactored inline JS event handlers to use Event Listeners, fully resolving CSP violation errors |

{micro_users-1.8.3.dist-info → micro_users-1.8.4.dist-info}/RECORD

@@ -21,9 +21,9 @@ users/static/users/css/permissions.css,sha256=b5XwKZKqJvU8iTlSC8P2EIDflSUb-0PP-O
 users/static/users/css/profile.css,sha256=AZVDK0gFwGo0vgPrmZ0BJVAxax8Icf2h8WFVNbt1UeU,2908
 users/static/users/css/style.css,sha256=rlLk1P4uxw9TKwsFTmXR77gYy0bVptwjzO_m3VGlYDo,1789
 users/static/users/js/login.js,sha256=PmUXzsb1OYKne6XPZwolbTLWEZsl77J0pgRYakam1Wg,883
-users/static/users/js/permissions.js,sha256=v2h5JKAdhXYoLwOEK6hc82MWqbKS_zcUVQgFPKC3vV0,3658
+users/static/users/js/permissions.js,sha256=ILGKe8sNYS4p-dW-hAzhZ29UKSJwntw3B2NLciwR_Uk,3884
 users/templates/registration/login.html,sha256=P-oUVjO6dd9AYJ_fAkGuJQm6JflqrAoVz7oAzvJYLbY,2958
-users/templates/users/manage_users.html,sha256=V3es_tA2KZxMkAjHWQEPuwwv9tLu3gGZvv49fMO-emY,6391
+users/templates/users/manage_users.html,sha256=wsvij8DzgP3NHD-dkibKUwg3Uj0lWMaAAapqpT4CHBk,6673
 users/templates/users/user_activity_log.html,sha256=nKVOvmkbVjGWZZyYNJahs7drWQFh_hvyUDWuauwJV6U,571
 users/templates/users/user_detail.html,sha256=FAPQYXr5qNgzaZ-mAnaNoCb8dVsUHtj_hY87ZYO9_d0,5302
 users/templates/users/user_form.html,sha256=jcyI7OQZOY4ue4DajPtfjAt2SmAYO5ZgHNOqTp2-FO0,1352
@@ -33,9 +33,9 @@ users/templates/users/partials/scope_manager.html,sha256=mqhSg2NA2U_Dc5bIf3OUasT
 users/templates/users/partials/user_actions.html,sha256=J44-sn0fMbLUWjdtlcf5YhgT5OYRykr1mFkeVXoI1ew,1543
 users/templates/users/profile/profile.html,sha256=HXxOWsGEAZb731iF-nY00dzbFcgVh60oF0C1X8AySb4,5377
 users/templates/users/profile/profile_edit.html,sha256=hhltTIdl62NNX290nFNZcQwbW1idXEU_DYlrAp07MWk,5242
-users/templates/users/widgets/grouped_permissions.html,sha256=7mZLHZdXN2qvq3wr6QpLbfxLcuXYIBMWn90myJRso6k,4119
-micro_users-1.8.3.dist-info/LICENSE,sha256=Fco89ULLSSxKkC2KKnx57SaT0R7WOkZfuk8IYcGiN50,1063
-micro_users-1.8.3.dist-info/METADATA,sha256=pQfNZWUYoRW4Fd-bZ39o5FSf-hfvPlRFDBOUZy3Embo,11301
-micro_users-1.8.3.dist-info/WHEEL,sha256=pkctZYzUS4AYVn6dJ-7367OJZivF2e8RA9b_ZBjif18,92
-micro_users-1.8.3.dist-info/top_level.txt,sha256=tWT24ZcWau2wrlbpU_h3mP2jRukyLaVYiyHBuOezpLQ,6
-micro_users-1.8.3.dist-info/RECORD,,
+users/templates/users/widgets/grouped_permissions.html,sha256=4xhrCnp7UxkZetTU9sezVRZaSn61-Ar9iCbdtufGSis,4100
+micro_users-1.8.4.dist-info/LICENSE,sha256=Fco89ULLSSxKkC2KKnx57SaT0R7WOkZfuk8IYcGiN50,1063
+micro_users-1.8.4.dist-info/METADATA,sha256=yQDP4uZAybtCQWkpps9MsZr8D2wXyUTDrY59q1rsHeg,11433
+micro_users-1.8.4.dist-info/WHEEL,sha256=pkctZYzUS4AYVn6dJ-7367OJZivF2e8RA9b_ZBjif18,92
+micro_users-1.8.4.dist-info/top_level.txt,sha256=tWT24ZcWau2wrlbpU_h3mP2jRukyLaVYiyHBuOezpLQ,6
+micro_users-1.8.4.dist-info/RECORD,,

users/static/users/js/permissions.js

@@ -82,4 +82,11 @@ document.addEventListener('DOMContentLoaded', function() {
     // Initial State Sync
     document.querySelectorAll('.model-group').forEach(group => updateModelMasterStatus(group));
     document.querySelectorAll('.permissions-card').forEach(card => updateAppMasterStatus(card));
+
+    // Prevent toggle propagation for specific elements
+    document.querySelectorAll('.prevent-toggle').forEach(el => {
+        el.addEventListener('click', function(e) {
+            e.stopPropagation();
+        });
+    });
 });

users/templates/users/manage_users.html

@@ -21,7 +21,7 @@
 
     <div class="mt-3">
         {% if not request.user.scope %}
-        <button type="button" class="btn btn-info no-print" title="إدارة النطاقات" onclick="loadScopeManager()">
+        <button type="button" class="btn btn-info no-print" title="إدارة النطاقات" id="btn-manage-scopes">
             <i class="bi bi-list me-1 h4"></i> إدارة النطاقات
         </button>
         {% endif %}
@@ -134,6 +134,13 @@
             })
             .catch(err => console.error('Error deleting scope:', err));
         }
+
+        document.addEventListener('DOMContentLoaded', function() {
+            const btnManageScopes = document.getElementById('btn-manage-scopes');
+            if (btnManageScopes) {
+                btnManageScopes.addEventListener('click', loadScopeManager);
+            }
+        });
     </script>
 {% endblock %}
 

users/templates/users/widgets/grouped_permissions.html

@@ -14,7 +14,7 @@
                  aria-expanded="false">
                 
                 <div class="d-flex align-items-center">
-                    <div class="form-check me-3" onclick="event.stopPropagation()">
+                    <div class="form-check me-3 prevent-toggle">
                         <input class="form-check-input app-master-checkbox" type="checkbox" id="master_{{ app_label }}">
                         <label class="form-check-label d-none" for="master_{{ app_label }}">تحديد الكل</label>
                     </div>