Setting projects inactive is impossible because "Active can't be blank".

A task can be assigned to any user, including non-administrators outside the group (who cannot modify the task).

Users can freely edit other users' profiles without being administrators. The only restriction is that they cannot change admin status.

We should make it clear that the 'user' drop down for a task means the person it is assigned to.

"Submitter by" should be "Submitted by"

By navigating to /users any user can delete any other user, including themselves (which, of course, logs them out). Users should not be allowed to delete, well, anyone, and admins should not be able to delete themselves.

Clicking Back on a project page leads to /group/id/projects, which fails. It should lead back to /group/id.

Even when set up elsewhere, the emails sent by the system link to senatedev.

The new scaffolding added some "notice" displays to the top of views, but it is also in the layout. It should be made to display only once.

Should the password for an account be lost, it cannot be recovered except by an admin (assuming proper permissions are implemented). There should be a way to reset it from the console

Nothing is displayed in the user_session index, and it contains an edit link that simply produces an error and a back button that sends the user to the same page.

Users can freely delete groups without being administrators.

Tasks should be listed based on completeness for easy sorting

The required length of the password and password confirmation is shown as an error on creating a new user even if the password is not given.

When the username or email already exists, the notice about the username or email being taken is displayed twice and counted twice.

1. Group#index edit links are broken.
2. missing links to add tasks on some project pages.

There is no difference made between groups a user is in and groups a user owns in the user page.

Assignees are not notified when they are assigned after the task has been created, nor when any changes or comments are made on the task.

So when a user logs in, they can see tasks assigned to them.

All page titles contain the word Groups: followed by an action.

There is no default administrative user, so it's impossible to do anything with the system without manipulating the database by hand.

After a group is deleted, its projects are orphaned and cannot be accessed any longer due to the URL scheme.

Groups cannot be removed, even by administrators.

Clicking Back on a project page leads to /group/id/projects, which fails. It should lead back to /group/id.

Members who are already logged in can still attempt to log in and register by entering the URL directly. This should be blocked to users who have an active session.

Team metrics should be sent to the professor.

Comments are read-only and cannot be edited or deleted, even by an administrator.

Successful is misspelled as succesful in login errors.

Any user can create group links and promote/demote/delete.