johnnyq
|
5e87f6fa25
|
Roles stage 1: Admin > Roles rebuilt showing each role's access per module as level-colored pills or Admin - everything, its agents with a link to Users filtered by role, search, Current and Archived tabs, and Edit, Copy, Archive, Restore and Delete greyed out with the reason when blocked; one role window for New, Edit and Copy with an Admin switch and a None, Read, Modify or Full level per module, each level listing what it allows, Reports limited to None and Read, and a copy dropping the Built-in description prefix; hardcoded role 3 checks replaced by guards so admin can't be taken off your own role or the only admins' role, archive needs no active agents, delete needs no agents at all, and names are unique in any case with the description optional; Administrator role can now be opened and renamed; role names escaped in flash messages, fixing an XSS; audit log records what changed on a role; lookupUserPermission reads the role's levels once per request instead of one query per check; new functions/roles.php, shared role_form.php and js/role_form.js; database 3.1.6 removes orphaned and duplicate user_role_permissions rows, clamps levels to 3 and adds a primary key on role and module; changelog updated
|
2026-10-17 20:43:45 -04:00 |
|
johnnyq
|
af51c4316f
|
Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present
|
2026-07-24 13:40:37 -04:00 |
|
johnnyq
|
b8873039a4
|
Rename Functions: flash_alert, sanitizeFilename and display_folder_options using camelCase instead to match other custom php functions
|
2026-07-14 17:41:41 -04:00 |
|
johnnyq
|
f1836c70cd
|
Replace Function logAction() with logAudit()
|
2026-07-14 17:35:23 -04:00 |
|
johnnyq
|
b57ddc0e5c
|
Replace Function sanitizeInput() with just escapeSql() and update all instances throughout
|
2026-07-14 17:17:50 -04:00 |
|
johnnyq
|
4079257739
|
Update UI/UX for Adding and editing roles, Permissions can be set upon role add nice blocker style radios buttons instead of select boxes
|
2026-02-04 13:12:24 -05:00 |
|
johnnyq
|
1de023f9df
|
Fix Role Archiving, Roles can only be archived if no users are assigned to the role
|
2026-01-11 16:46:53 -05:00 |
|
johnnyq
|
b4e5e3fda7
|
Fix injection with role id affecting authenticated admin accounts only
|
2025-08-04 12:06:05 -04:00 |
|
johnnyq
|
fae7e76721
|
Remove logging comments as its implied in admin also if returning 1 field for logging use getFieldById Function
|
2025-08-01 18:08:02 -04:00 |
|
johnnyq
|
012b0f1a77
|
Update Admin posts to use new functions flash_alert and getFieldById which greatly cleans up and reduces the code also removed logging comments as implied by the function logAction
|
2025-08-01 17:21:35 -04:00 |
|
johnnyq
|
d2dac1915d
|
Update admin, user, guest and client post to use new redirect function
|
2025-08-01 15:25:52 -04:00 |
|
johnnyq
|
2333d81276
|
Update more broken links from file dirextory consolidation
|
2025-07-29 18:34:51 -04:00 |
|