added admin sensing to index, will replace with a better nav system later
corrected issues identified by OWASP-lite scan
resolved X-Frame security preventing iframe loading of pages (enable non interactive pages for same domain)
convert to explicit Module Import/Export for DB connection and modularize common code for maintainability and security
Roadmap
Redo all nav links to return to origin/breadcrumb structure/something like that (manage races doesn't return to admin) replaced with admin nav header
Deal with races in the past. create hide/show functionality for races and series (implement as Bool in schema, switch on admin.html)
Non-Admin User system
Retain ability of unregistered users to create entries and sign up for everything
Users have the option to create an acct
Acct will be automatically mapped to registration (will look for common contact fields)
Users can register boats (this will assist with scoring challenges)
entries created by a logged in user can be only be edited by that user or an admin
self created users can be elevated to admin by an admin. Workflow for new admins will be create acct -> existing admin elevates them
User mgmt panel - add admin users - what else?
Tool tip documentation
RC Report page/printable check-in sheet - need to see how PROs use checkin sheet
race series automation for rapid deployment of races (e.g. Winter Series, Wednesday Championship Series, Kerr Champ Series, Jordan Chap Series
templatize/automate race naming
Create acct management/profile page and implement confirmation field for password change
Non-standard event Family membership RC credit handling
OWASP security review
rework the whole chili sign up logic and expand to support potlucks or chili, right now RC won't be able to edit their chili signup. Instead we will create a new table for putlucks, and implement with a special chili flag.
Support for non-race events (e.g. Potlucks, socials?), chili flag for winter racing (winter series automatically sets chili flag but can be unchecked. Chili count is added to race cards)
->POST OWASP REVIEW<- Tie in CSC membership data. Tie into identity resolution page, identities from CSC membership data are gold source
Race Results form?
->Pre Launch<- Build non-prod environment for parallel enhancements and testing, set cost alerts if non-prod is left in allocated state