All issues

Search results

SeedDataService's uuid fix shipped inert — both method_exists probes are false, because getId() is magic too

Status: Open.

#813 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

24 call sites test is_array() on ObjectService::find() — bezwaar/beroep and subsidie capabilities are dead, and repairing them creates IDORs

Status: Open.

#811 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

gate-57: 7 orphaned write capabilities, and 5 of them are hidden by having unit tests and no callers

Status: Open.

#802 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

SECURITY: 33 #[NoAdminRequired] endpoints are unguarded IDORs — any authenticated user can enumerate any resident's case dossier (gate-7 reports 0; .github#365)

Status: Open.

#801 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

security: submitResult()'s IDOR guard reads the assigned inspector from the REQUEST body, so it can never refuse (routed, #[NoAdminRequired])

bugSomething isn't workingSomething isn't working

Status: Open.

#799 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

Four admin settings tabs are non-functional: they call procest API routes that do not exist (HTTP 200 + HTML, so nothing throws)

Status: Open.

#794 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

perf: unlinkSubCases() issues up to 200 synchronous saveObject() calls inside one request (openregister#2420 class; gate-61 cannot see it)

Status: Open.

#793 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

Inspection submission has two competing implementations — the unreachable one is the canonical-spec one (gate-57 ×2), and REQ-001/REQ-003 were never built

Status: Open.

#786 In ConductionNL/procest;

· rubenvdlinde opened on Aug 11, 2026

Two inspection-checklist implementations: the wired one is the weaker; the audit-grade run model has zero callers (gate-57)

Status: Open.

#777 In ConductionNL/procest;

· rubenvdlinde opened on Aug 9, 2026

Substitution "My Work" integration is orphaned — 4 exported functions, 0 callers, no toggle in the UI; the e2e test hides it behind a soft if

Status: Open.

#768 In ConductionNL/procest;

· rubenvdlinde opened on Aug 8, 2026

e2e: zaakdossier UI scenarios are permanently skipped — no seeded case fixture in the Playwright environment

Status: Open.

#764 In ConductionNL/procest;

· rubenvdlinde opened on Aug 8, 2026

9 menu-layout removals orphan their routes (ADR-044) — and they block EVERY register/schema edit

Status: Open.

#744 In ConductionNL/procest;

· rubenvdlinde opened on Aug 5, 2026