AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-08-16 04:25:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix some broken API calls after RBAC update

Browse Source
This commit is contained in:
johnnyq
2026-07-25 16:59:03 -04:00
parent c509b7f693
commit e6daf00528
7 changed files with 12 additions and 602 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
api/v1/expenses/read.php
View File

@@ -5,15 +5,15 @@ require_once '../validate_api_key.php';
require_once '../require_get_method.php';
// Expenses aren't stored against client IDs, so we instead validate the API key is for All Clients
// Expenses aren't client-scoped; access is gated by module_financial in enforce_api_rbac.php
if (isset($_GET['expense_id']) && $client_id == "%") {
if (isset($_GET['expense_id'])) {
// Expense via ID (single)
$id = intval($_GET['expense_id']);
$sql = mysqli_query($mysqli, "SELECT * FROM expenses WHERE expense_id = '$id'");
} elseif ($client_id == "%") {
} else {
// All expenses
$sql = mysqli_query($mysqli, "SELECT * FROM expenses ORDER BY expense_id LIMIT $limit OFFSET $offset");