The ldap ORM Lib is full of bugs!

Is better to rewrite the lib.
If we do not change the interface is should be easy to use the new lib with our old controllers.

Paul writes all external included libraries in the file README.md

As a user of the role "elder" I want to see a list of all users so that I can start all my user interactions here in the list.

If you update a user in the details user view the password gets cleared.

We don't log transactions yet.
Let's discus where critical areas are (e.g. groupmanagement) and if we want to protocolate changes with timestamp there.

As a creater of a group I want to be able to assign/create a mailinglist to/for a group.
I also want to be able to do that while I create the group.
I want that every user of the group with his mail is in the list.
But I also want to be able to add external mails.

https://getbootstrap.com/docs/4.0/examples/dashboard/

Menu like:
https://getbootstrap.com/docs/4.0/examples/offcanvas/

adding the basic symfony setup https://symfony.com/

We use the lastest version

As a user of the group "elder" I want to create a new group.
I want to add people to this group.

As an logged in user I want so see a basic template with a navbar.
I want that it is resposiv.
I want that it is simple.
Maybe Bootstrap?

As a the system I need to differentiate between two group types. A Stamm and a group.

Maybe use an abstract class group.

If a user is logged in and the navbar with the codeline

<span class="navbar-toggler-icon"></span>

is included, the user can't go to the secound feedback page.

GET http://html2canvas.appspot.com/?url=data%3Aimage%2Fsvg%2Bxml%3Bcharset%3Dut&callback=html2canvas_0 net::ERR_ABORTED
proxyGetImage @ html2canvas.js:2285
loadImage @ html2canvas.js:2462
getImages @ html2canvas.js:2353
getImages @ html2canvas.js:2309
getImages @ html2canvas.js:2309
getImages @ html2canvas.js:2309
getImages @ html2canvas.js:2309
_html2canvas.Preload @ html2canvas.js:2525
(anonymous) @ html2canvas.js:2772
setTimeout (async)
html2canvas @ html2canvas.js:2771
runH2c @ feedback.js:762
(anonymous) @ feedback.js:789

As any user I want to login into the system with the creditals from the ldap database

As a user who adds a user, I want to be able to choose if a user has access to the wiki or not.

For that I want to be able to check a box.
Then the user should be in the group wiki and nordlicht.

As a logged in user with the group "ROLE_elder" I want to be able to see all and add an event.

I want to set:

• name
• description / invitation text
• price
• date (range or single date)
• place

The user should have the possibility to send feedback (remarks, errors, bugs, ...) to the developers over a feedback-button on each page.

Update Twitter Bootstrap to the actual version.
See: https://getbootstrap.com/docs/4.0/migration/

Put every general trans tags into the general group (general.asdf).

For example:

• name
• price
• gid
• id
• description

As a user of the role "groupleader" I want to add a new user to the system.

As a normal user I want to be able to edit my own user data on the detail user page.

As a user of the role "stavo" I want to edit all users who are in the group of my stamm.
As a user of the role "groupleader" I want to edit all users who are in my scout group.
As a user of the role "buvo" "admin" I want to edit all users.

The login page will be shown under http://127.0.0.1:8000/login althought you are logged in.
For the case the user is already logged in the login page should redirect to /dashboard .

As a user I want so see a list of all groups I am a member of.
As a user of the role "buvo", "admin" I want to see a list of all groups.

As a logged in user with the role "ROLE_elder" I want to be able to add a material object.
I want to be able to set:

• name
• a description
• the offers

Every material object must have min. 3 offers.

A offer consists of:

• name
• URL to the offer
• price
• shop name

I want to be able to set the offers while adding the material object.
The material object should be reusable in different material requests.

I want that only I and a user with the role "ROLE_REMOVE_ALL_MATERIAL_OBJECTS"
is able to remove my object. (symfony ACL)
Also only users with the group "ROLE-elder" should be able to see the material object.

https://symfony.com/doc/current/forms.html#creating-form-classes
https://knpuniversity.com/screencast/symfony/reactjs-api
https://github.com/mariusbalcytis/webpack-bundle

As a logged in user I want to get redirected to the dashboard

We need a better way to mock services in the tests.
The actual way is marked as:

Setting the "reCaptcha" pre-defined service is deprecated since Symfony 3.3 and won't be supported anymore in Symfony 4.0: 2x
1x in FeedbackControllerTest::testCreateFeedbackDatabaseEntry from Tests\AppBundle\Controller
1x in FeedbackControllerTest::testCreateFeedbackDatabaseEntryWithLoggedInUser from Tests\AppBundle\Controller

For the moment I marked the tests with Legacy to avoid problems while testing on circleci.

As a stavo user I want to be able to delete any user of my stamm.
As a buvo user I want to be able to delete every user.

Remove all security requests in if( ) and replace them with voters.

See:
https://symfony.com/doc/current/security/voters.html

As a user, I want to get help by clicking on a (?) so that a short intro starts and shows me what I can do on the actual page.

See: https://introjs.com/

We need a ldap test database as ldif file for testing

It should not include any real user information

As a user, I want that the form denies negativ price values so that there are no invalid prices in the database.

Assets in the entity class
Mysql restrictions

As a user who adds a new user I want to have a client side auto generated password so that I don't have to create a secure password for every user. It should be secure but easy to memories.

As a developer I want to have a good and clean abstraction level of the LDAP database.

We need an abstraction of the users, the groups, the mailinglists.

Maybe we should add a second abstraction level:
LDAP Database
LDAPObject (LDAP User <- PHP class)
Object (User <- PHP class, can have a LDAPObect and an MySqlObject)
ObjectService (UserService <- Symfony service, get set del users)

Symfony has a ldap bundle with a ldap service and nice functions.

As a logged in user and a member of a group I want to see every user in this group.

We should replace all logins in the tests with security tokens:
https://symfony.com/doc/current/testing/http_authentication.html

The class TestTools should still exist with static functions. But with tokens.

This should make the tests faster!

Reset after symfony 3.4 was released!

As a logged in user and the owner of a event I want to be able to create a invitation link.

A person with the link should be able to join an event.
He should specify:

• his full name
• his address
• his stamm (there should be a list)
• his group name

There should be a text like "ich melde mich kostenpflichtig zu der Veranstalltung an" that you have to except.

A user is only allowed to join one time with the same name, stamm and group.

There must be a system to avoid robots to join the event!

As a user of the role "elder" I want search users in the user list. I want to sort and filter the list in my browser.

(Maybe use http://tablesorter.com/docs/ for this story)

The stamm names should be dynamic.
Aka UserController->addUser() See TODO
Possible solutions:

• Config-Datei
• Datenbank
• Mit Hilfe des LDAP auslesen

But first we have to discuss which solution is the best.

As a logged in user with the role "ROLE_elder" I want to be able to add a material request
I want to be able to set:

• name
• a description
• the stamm the request is for
• the material objects (quantity, )
  Automatically the request should have a date of creation and a year the request belongs to.
  (After a special date in the year the request belongs to the next "request year")

I want to be able to set the objects while adding the material request.

I want that only I and a user with the role "ROLE_REMOVE_ALL_MATERIAL_REQUESTS"
is able to remove my object. In addition only I or users of the group "ROLE_EDIT_ALL_MATERIAL_REQUESTS" should be able to edit the request. (symfony ACL)
Also only users with the group "ROLE-elder" should be able to see the material request.