I thought it would be helpful for us to have a checklist of things we need to do before we go into production:

• turn off stack traces and debugging
• do we need to protect access to /system? E.g. With a .htaccess
• do you need any flood protection to prevent having lots and lots of signups from spammers? Sometimes this can result in big problems when emails are being sent at with invitations etc
• Any other security hardening that needs to be done before we deploy
• check all as well with cloudflare
• #20

I try to upload a profile pic to my profile:

It seems to work but when it saves, it fails and seems to suggest that a password change is required:

I have been asked if we can add Spanish as a language - could you tell me how we can do that? I could not find it in the Decidim docs.

We need to be able to notify the community of upcoming maintenance windows.

I am trying to override the use of 'newsletter' and change it to 'Town Hall Update' but so far I am rather unsuccessful at finding the base string path.

Maybe there is some secret way to figure it out but if not can I have a quick lesson please?!

I can't seem to find where to fix this but the emails seem to have Town Hall as the from name - maybe it is in variables, but I can't log into the admin portal at the moment.

This occurs both front and back end. I can however upload for example CSV files without any issue. Maybe a permissions issue with the image upload?

My actions:

• The code should be available on github
• Github actions to release docker images
• Bind used images in infra to the one released by dockerhub

The team decided to go with townhall.mautic.org rather than community.mautic.org (sorry!) but both of these result in a 404 not found error when I access them (I set the A for community. as well as townhall. just to test I wasn't doing something silly!)

According to the docs:

The recommended place for scripts is app/views/layouts/decidim/_head_extra.html.erb

Source: https://docs.decidim.org/en/develop/customize/data_consent

Code to be installed:

<script>
    (function(w,d,t,u,n,a,m){w['MauticTrackingObject']=n;
        w[n]=w[n]||function(){(w[n].q=w[n].q||[]).push(arguments)},a=d.createElement(t),
        m=d.getElementsByTagName(t)[0];a.async=1;a.src=u;m.parentNode.insertBefore(a,m)
    })(window,document,'script','https://m.mautic.org/mtc.js','mt');

    mt('send', 'pageview');
</script>

I would probs be able to do this if I could have some step by step instructions how to do this eg with Visual Studio Code?

I switched the primary host to community.mautic.org as we discussed that it's actually moving more towards being a community portal rather than just governance, however it seems that I'm now locked out as we're getting a 404 error. The DNS is set correctly.

Maybe it needs a restart? I did put townhall in the secondary host as was suggested. it seems like town hall is now redirecting to community, but community is giving a 404. Maybe I missed a step somewhere?

For SEO purposes we need to have a sitemap for the community portal.

According to this feature request it's available as a plugin: https://git.fpfis.eu/future-of-europe/digit-cofe-libraries/digit-cofe-sitemap

Seems this may be the source: 2023/08/01 13:37:00 [crit] 2631#2631: *255 open() "/var/lib/nginx/body/0000000026" failed (13: Permission denied), client: 62.64.129.146, server: _, request: "POST /admin/assemblies/1 HTTP/1.1", host: "195.15.236.203", referrer: "https://195.15.236.203/admin/assemblies/council/edit"

We are struggling to have the 'read only link' to the pad as outlined in the docs after a meeting is closed be displayed: https://docs.decidim.org/en/develop/services/etherpad.html#_how_is_etherpad_lite_integrated_in_meetings

I noticed today that all past events are throwing a server error when I was doing a demo video.

I thought initially maybe this was because the event had not been closed but I went to close the event and it still as throwing an error.

Here's the example:

https://community.mautic.org/assemblies/community-team/f/5/meetings/26

I'm struggling to see where we restrict voting (supporting) to only those who are authorized via the census upload? I could not find it in the org overview in system, or under the processes themselves. Wondering if it is something that needs to be turned on in a place I can't access!

When I was trying to add a new list of private participants the popup model flagged up that there was a missing translation string:

en.activemodel.attributes.participatory_space_private_user_csv_import.file

When a meeting is due to start it's meant to show the link to join, but it's not.

Also, the calendar event which you get when you export the calendar after saying you're attending doesn't provide the meeting link.

It used a Zoom meeting link.

When I imported the CSV of private participants into the General Assembly, it said that it had sent an invitation to folks who were not currently members, but the invite was not emailed. I had to manually click to resend, when it was sent immediately - maybe a cron has to fire or something to process a queue? If so would be helpful to know the timings to wait.

Ideally I would like to have the capacity to limit voting on proposals in some processes just to our core team - so anyone can endorse but only the core team can vote - and also maybe the current leadership team. Both would be fine to be done by CSV.

I'd also like to be able to rename the 'census' to something more aligned with our governance - eg General Assembly Membership.

This is quite minor but the login is expecting an icon (https://townhall.mautic.org/decidim-packs/media/images/icons-c4fd0f43651700b0c768.svg#icon-openid) and nothing is being found.

It seems that the icon does not exist in the icons file that it's looking towards.

I found in the docs:

By default, Decidim will search in its icons library for an icon named as the provider. You can change this adding an icon or icon_path attribute to the provider configuration. The icon attribute sets the icon name to look for in the Decidim’s icons library. The icon_path attribute sets the route to the image that should be used.

Could we maybe use a Mautic icon for this?

The attached would work great.

In case it's helpful here's the code sample. I'm happy to try to do this myself if I can have some guidance on how to get into the file system.

Here is an example of the configuration section for the Decidim strategy, using an icon located on the application’s app/packs/images folder:

    decidim:
      enabled: true
      client_id: <%= ENV["DECIDIM_CLIENT_ID"] %>
      client_secret: <%= ENV["DECIDIM_CLIENT_SECRET"] %>
      site_url: <%= ENV["DECIDIM_SITE_URL"] %>
      icon_path: decidim-logo.svg

I have the option enabled to allow users to embed images within the editor but whether I drag the image into the editor or use the 'image' insert button to locate it, the images don't see to be saved.

Example: https://townhall.mautic.org/processes/roadmap/f/4/proposals/1

e.g. the community calendar url https://community.mautic.org/s/Q6xhy1K0TS is not working if added via apple calendar app.
Error 500.
Link to a screenshot in Slack: https://mautic.slack.com/files/UD7GWS908/F0669C7DAS0/cleanshot_2023-11-17_at_08.38.08_2x.png

Adding from GCal seems to work (infos from Ruth) but Apple Calendar does not work.
thx!

Per this FR: https://meta.decidim.org/processes/roadmap/f/122/proposals/17233 we would like to implement user timezones - it's really important for an international community!

Could we incorporate the work from openpoke/decidim#11 as a patch, maybe?

In discussion with @froger we realized that we could maybe use groups as a way to have people join an assembly via the front end. Currently it's only possible to add people as a contributor, for example, through the backend - which is a time intensive task.

To explore the following:

• creating a group for a working group
• add the group as a member of an assembly
• add an individual to the group as a member
• check for that individual is able to access the assembly as a member of the assembly
• find a way to make groups more prominent
• document the whole process of joining a group to become a member of an assembly

Hi folks,

A comment from one of our users is that the reply to email address that is used when messages are being sent out it's currently using:

[email protected]

I can't see anywhere in the system settings where I can change this, the documentation is not forthcoming either. any suggestions where to start?

Ideally we would like this to be

[email protected]

Here are the bugs that I have come across so far, I think most are permissions related!

• #6
• #5
• #4
• #3
• #8

Also:

• #7

Questions:

• #2

I am able to log in fine with Auth0 but when some of our initial testers are trying to log in they are getting a server error:

I've so far had two reports of this nature. @froger @rsdeus I can't see anything in the nginx logs, maybe you can take a look?

In the Auth0 logs I am seeing:

"description": "Invalid authorization code",
this immediately follows a successful login from the user in the logs which is a bit weird? They do not get logged in and I am not seeing a user being created for them in Decidim.

❓ Maybe it is falling over when trying to create a user?

Hey folks,

just got this report in from one of our community members:

I tried via Auth0, but got Could not authenticate you from Mautic Community Login because "Invalid 'state' parameter".×

Any ideas what this might be? I thought we had resolved this! (see #17)

I noticed today when I was trying to clean up an event that there is a server error when I try to delete them.

https://watch.screencastify.com/v/GEPWfKKfw6d1eJZGqN8c

I also can't delete the meeting's component that these belong to. I assumed this was because there were existing meetings which is what led me to try to delete them.

Only use the community login.

We are missing the 'Awesome Map' module on the homepage - maybe related to #4, perhaps the module is missing?

When I go to meeting and then go to the registration section, and click on registration form as if I was wanting to edit the form, I get a server error.

This is the ur that I landed on:

https://community.mautic.org/admin/assemblies/education-team/components/8/manage/meetings/25/registrations/form/edit

When I was trying to rewrite the search URL for groups to something a bit easier to manage it seems like the case sensitive nature of the url is not respected, which means the search filter is not applied.

Origin:
/groups

Destination:
/search?filter%5Bterm%5D=&filter%5Bwith_resource_type%5D=Decidim%3A%3AUserGroup&filter%5Bwith_scope%5D=

When saved it becomes:

/search?filter%5bterm%5d=&filter%5bwith_resource_type%5d=decidim%3a%3ausergroup&filter%5bwith_scope%5d=

So while you do actually land on the search page, the group's filter is not selected which is confusing.

I'm getting warnings from the infrastructure that the Decidim container is running out of space and it looks like I'm not able to save and destroy sessions as a result.

How do we increase the space available?

I noticed that when testing a bug with the etherpad integration it was possible to go to https://pads.mautic.org without being logged in at all, and I could create a pad. I'm concerned that this would be open to abuse.

Is it possible to implement https://github.com/ether/ep_openid_connect so that people have to be logged in with their Mautic Community Login? Or just to restrict the creation of pads outside Decidim?

I can create an application etc on Auth0 if this is possible to do alongside the Etherpad / Decidim installation.

It might also be helpful to have a login as admin to pads.mautic.org in case we need to manage the pads that are created?