Project

General

Profile

Actions
Copy link

Feature #163

open
NP NP

Canteen: overlong void reason or variance note returned a 500

Feature #163: Canteen: overlong void reason or variance note returned a 500

Added by Navya P. about 2 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Normal
Assignee:
Navya P.
Target version:
-
Start date:
09/28/2026
Due date:
09/28/2026 (46 days late)
% Done:

100%

Estimated time:
Resolved By:
Navya P.

Description

Found in the security review of the void, day-close and register paths.

  • A void reason over 256 characters, a variance note over 500 or a cashier id over 200 reached the database and came back as an opaque 500.
  • Now refused in the domain with a 400 that names the limit; the request changes nothing.
  • The limit is measured on the trimmed text, which is what is stored.
  • Tests at the limit and one over, plus two HTTP tests; with the guard removed they fail with 500.
    Fixed in commit 681c0aa on integration/canteen-v1.

NP Updated by Navya P. about 1 month ago Actions
Copy link
 #1

  • Status changed from New to In Progress

Work started (see prior commits).

NP Updated by Navya P. about 1 month ago Actions
Copy link
 #2

  • Status changed from In Progress to Resolved
  • Resolved By set to Navya P.

fix(canteen): bound free text in the domain, overlong input is 400 not 500 (681c0aa).

Built and tested (API unit + integration, portal) on integration/canteen-v1. Merge to dev pending - see the module's week-4 TDD plan.

NP Updated by Navya P. about 1 month ago Actions
Copy link
 #3

  • Tracker changed from Bug to Feature

NP Updated by Navya P. about 1 month ago Actions
Copy link
 #4

  • Due date set to 09/28/2026
  • % Done changed from 0 to 100
Actions
Copy link

Also available in: PDF Atom