6 Commits

Author	SHA1	Message	Date
johnnyq	cd565b73c7	Taxes stage 2: Tax Collected report rebuilt for filing with an Invoiced basis (each sent invoice in the month of its date) or Paid basis (each payment carrying its share of its invoice), tax by part of each rate with registration numbers so a state's and a county's parts count apart and parts named alike add up in one row, sales before tax and net of discounts split into taxable, exempt and non-taxable, tax paid on purchases by part and net tax collected less paid, exempt sales by client with certificate and expiry, quarterly or monthly with a chart and CSV export of the tax table or the exempt sales, archived payments left out; expenses and recurring expenses record the tax included in them with a rate worked out from the amount as typed or typed over from the receipt, a tax amount with no rate allowed, refunds giving their tax back, recurring expenses copying it to each expense recorded, vendor defaults filling it in, and the list and quick looks showing it; exports gain invoice subtotal, discount, tax and tax by part, quote and recurring invoice tax, expense before tax, tax and tax rate, and client tax rate and exemption columns; API adds a taxes read endpoint with each rate's parts, subtotal, tax, tax by part and registration numbers on invoice and quote reads, and each line's rate on invoice item reads; Admin > Taxes explains naming parts alike and links the report; demo data names Allegheny County's state part PA Sales Tax and taxes the company's own-use purchases; removes the unused getMonthlyTax and getQuarterlyTax; database 3.1.2 adds expense and recurring expense tax rate and amount; changelog updated	2026-10-17 13:27:53 -04:00
johnnyq	36ea4a9a80	API: allow reads to filter by client_id on top of RBAC client scoping ... The RBAC rework dropped the client_id read filter along with per-key client scope, so an all-clients key could no longer narrow to one client. apiClientScopeSql() now appends the filter after the scope fragment, so it can only narrow, never widen. Reads only - writes take client_id as their target client.	2026-08-31 18:30:09 -04:00
johnnyq	e6daf00528	Fix some broken API calls after RBAC update	2026-07-25 16:59:03 -04:00
johnnyq	c509b7f693	Add user-based RBAC for API keys ... API keys now run as a user and inherit that user's module, operation, and client permissions. Drops per-key client scoping and removes existing keys (must be recreated). Adds an edit modal to change a key's user.	2026-07-25 16:50:58 -04:00
johnnyq	1e02322382	API: Invoice_items only return if item_id or invoice_id is specified and do not return all invoice items	2026-04-11 17:57:22 -04:00
johnnyq	830f40edee	API: Add Invoice Items read endpoint	2026-04-11 13:32:50 -04:00