Fix: Disallow read-access to nested user collections for disabled users #568
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # | |
| # This source file is part of the Stanford Biodesign Digital Health ENGAGE-HF open-source project | |
| # | |
| # SPDX-FileCopyrightText: 2023 Stanford University and the project authors (see CONTRIBUTORS.md) | |
| # | |
| # SPDX-License-Identifier: MIT | |
| # | |
| name: Build and Test | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| on: | |
| pull_request: | |
| workflow_dispatch: | |
| workflow_call: | |
| jobs: | |
| reuseaction: | |
| name: REUSE Compliance Check | |
| uses: StanfordBDHG/.github/.github/workflows/reuse.yml@v2 | |
| markdownlinkcheck: | |
| name: Markdown Link Check | |
| uses: StanfordBDHG/.github/.github/workflows/markdown-link-check.yml@v2 | |
| lint: | |
| name: Lint | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| lfs: 'true' | |
| - name: Git LFS Pull | |
| run: git lfs pull | |
| - name: Use Node.js 22.x | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22.6.x | |
| - name: Install Dependencies | |
| run: npm run install | |
| - name: Build | |
| run: npm run build | |
| - name: Lint | |
| run: npm run lint:strict | |
| permissions: | |
| contents: read | |
| buildandtest: | |
| name: Build and Test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| lfs: 'true' | |
| - name: Git LFS Pull | |
| run: git lfs pull | |
| - name: Use Node.js 22.x | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: 22.6.x | |
| - name: Install Dependencies | |
| run: npm run install | |
| - name: Install Firebase CLI | |
| run: npm install -g firebase-tools | |
| - name: Build | |
| run: npm run build | |
| - name: Test | |
| id: test | |
| run: npm run test:ci | |
| - name: Upload coverage to Codecov | |
| uses: codecov/codecov-action@v5 | |
| with: | |
| files: functions/coverage/lcov.info | |
| fail_ci_if_error: true | |
| token: ${{ secrets.CODECOV_TOKEN }} | |
| permissions: | |
| contents: read |