E.g. I tried a simple example with A country table containing an iso-code and a name, and a company table containing a name and a country. Somehow I can not use the iso code in the company table, I am forced to use the auto-incrementing primary key. I am not able to set iso-code column as unique which would solve my issue.
---------------------------------
The app also has UI problems. E.g. when adding a new row, one the last field edited seems to be still in editing mode since the value is left-bound and not centered like the other values. Only after entering another field the value seems to be recognized as changed and I can save the data.
Clicking on "Swagger apis dock" results in following error message "Cannot GET /nc/testproject_rest_api_HZOx/v1/graphql".
---------------------------------
Having added a few images via attachment column, I noticed that I can access those from a incognito window where I am definitely not logged in.
Steps to reproduce:
1. connect to database container -> docker-compose exec --user postgres xcdb psql
2. connect to database -> \c xcdb
3. list tables -> \d
4. select data from the table with attachments (in my case the company table) -> select * from xa1__company;
5. copy one of the urls and paste it in an incognito tab
---------------------------------
Another issue that I see is that it relies a lot on external libraries, of which this one has been blocked by my ad-blocker --> https://static.hotjar.com/c/hotjar-2297736.js?sv=6
Hotjar seems to be a tool tracking the user interactions with the product -> https://www.hotjar.com/
This is where I stopped evaluating your product LOL
---------------------------------
Clicking on Calendar, Kanban, and Form results in a "Coming soon" message. Which is curious since, your website demonstrates it already.
---------------------------------
Those rules saying delete cascade seem to be nonsense. I was able to delete rows in both tables (country, company) without any cascading happening which would result in an inconsistent state. --> Foreign keys seem only to exist within your applications metamodel and they don't seem to be respected accordingly.
---------------------------------
My final verdict: You have a lot of work ahead of you if you want to bring this into a production ready state. Until then I recommend to others not using it with your production databases, and because of coming with the hotjar user action tracking tool not use and privacy related data with it.