AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-09-14 02:35:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

API: allow reads to filter by client_id on top of RBAC client scoping

Browse Source 
The RBAC rework dropped the client_id read filter along with per-key client scope, so an all-clients key could no longer narrow to one client. apiClientScopeSql() now appends the filter after the scope fragment, so it can only narrow, never widen. Reads only - writes take client_id as their target client.
This commit is contained in:
johnnyq
2026-08-31 18:30:09 -04:00
parent b0c12ac89d
commit 36ea4a9a80
4 changed files with 43 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
api/v1/ticket_replies/read.php
View File

@@ -10,6 +10,7 @@
* ticket_reply_id optional - Return a single reply by its own ID
* ticket_id optional - Return all replies on a single ticket
* type optional - Filter by reply type: Internal, Public or Client
* client_id optional - Only return replies on tickets for this client
* include_archived optional - Set to 1 to include archived replies (default: excluded)
* limit optional - Max rows to return (default 50)
* offset optional - Offset for pagination (default 0)