johnnyq
556ab22c79
Enfoce Sales Permission Read on products export
2026-07-28 17:53:13 -04:00
johnnyq
c5ff3e2a3f
Normalize line endings to LF; add .gitattributes and .editorconfig
2026-07-28 17:45:52 -04:00
johnnyq
7f7880a4a7
Add Quick Payments view modal in Invoices
2026-07-28 12:49:57 -04:00
johnnyq
5f3a0bec46
Remove old payments and revenues and all ties to the pages as these are combined in income now
2026-07-28 12:38:29 -04:00
johnnyq
c3896ba3d6
Add Export CSV to the new combined income page
2026-07-28 12:26:50 -04:00
johnnyq
2e855f62c9
Require credential module access to view or share credentials
2026-07-28 00:40:33 -04:00
johnnyq
22e93589cb
Fix share link view accounting and quote response handling
2026-07-27 21:11:45 -04:00
johnnyq
829527244e
Fix broken ajax
2026-07-27 20:25:48 -04:00
johnnyq
a4fdced10f
Rate limit 2FA code attempts and narrow the TOTP acceptance window
2026-07-27 18:36:43 -04:00
johnnyq
97490bef3b
Security Fix in recurring invoices in cron
2026-07-27 18:07:15 -04:00
johnnyq
5fc2f93b38
Allow negative numbers in add expense
2026-07-26 01:40:11 -04:00
johnnyq
04014da21f
Combined Payments and Revenues as one View called income keeps all income in one place and still can add revenue not related to invoice
2026-07-26 01:10:52 -04:00
johnnyq
276e84ad0b
Expenses: Set Current Date in new expense
2026-07-25 20:38:58 -04:00
johnnyq
c509b7f693
Add user-based RBAC for API keys
...
API keys now run as a user and inherit that user's module, operation, and client permissions. Drops per-key client scoping and removes existing keys (must be recreated). Adds an edit modal to change a key's user.
2026-07-25 16:50:58 -04:00
johnnyq
8d46e2a7db
Fix Client Permission overides to include deny allow list in projects prohect and edit ticket
2026-07-25 13:28:47 -04:00
johnnyq
ff4b69b511
Client Enforcement via function on client edit instad of in sql query
2026-07-25 00:35:47 -04:00
johnnyq
761b2a7af4
Module permissions modal enforcement sweep to match its post counterpart
2026-07-25 00:28:42 -04:00
johnnyq
7a793cbbcc
Add more enforceClientAccess to agent ajax gets
2026-07-24 22:51:57 -04:00
johnnyq
113ef4b9a4
Add more enforceClientAccess
2026-07-24 22:49:18 -04:00
johnnyq
3524010d7a
Add enforceClientAccess to 4 bulk modals initially missing
2026-07-24 22:06:42 -04:00
johnnyq
5c4805b822
Neutralize CSV formula injection in generated exports using the new created escapeCsvFormula Function
2026-07-24 18:12:45 -04:00
johnnyq
af51c4316f
Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present
2026-07-24 13:40:37 -04:00
johnnyq
91a1676e89
Update missing CSRF endpoint checks
2026-07-24 13:16:51 -04:00
johnnyq
e7698f15bd
Make better use of formatAddress function for clients listing
2026-07-24 12:22:15 -04:00
johnnyq
c7b34fe107
Remove leftover getFallBack in client pdf export in favor of ?: '-'
2026-07-23 18:29:11 -04:00
johnnyq
41b118ab87
Add formatAddress function and replace all addresses with it
2026-07-23 18:10:39 -04:00
johnnyq
9c65644adc
Update the rest of the PHP functions to use camelCase
2026-07-23 17:39:06 -04:00
johnnyq
3d94846a61
Fix broken link to service modal in services
2026-07-23 13:48:00 -04:00
johnnyq
90bc8ed029
Fix broken links to modals and remove _details from service
2026-07-23 13:43:04 -04:00
johnnyq
40be80981d
Fix vendor modal link in service details
2026-07-23 13:34:08 -04:00
johnnyq
b853c24c96
Remove a few more unused vendor contact modals and update the escaping in rename modal vendor_details.php to vendor.php
2026-07-23 13:26:06 -04:00
johnnyq
5f26d75e18
Update Functions in ticket_edit_vendor and document link vendor and deleted legacy code unused that had legacy functions tied to them
2026-07-23 13:17:41 -04:00
johnnyq
8f43b92496
Use stripe_init include to init stripe and updated code everywhere
2026-07-23 13:00:01 -04:00
johnnyq
8ee780566e
Cleanup Expense Code in post blocks and remove single use function since stripe payments get reconciled during nightly cron
2026-07-22 17:06:10 -04:00
johnnyq
66b38b7f19
Get Expense from Stripe instead of Static Entry
2026-07-22 16:07:39 -04:00
johnnyq
d5a1305192
Reorg Admin Side nav menu
2026-07-21 14:17:16 -04:00
johnnyq
4bb497ea9c
Reorganize Client Side nav and the renamed Client overview to All Client Docs side nav
2026-07-21 13:43:56 -04:00
johnnyq
97ab1df762
Feature: Add Transactions, reorg Main side nav
2026-07-21 13:21:23 -04:00
johnnyq
058e31c290
Fix Truncated Client name in side nav needs to be truncated before escaped
2026-07-20 19:31:31 -04:00
johnnyq
d173357b51
Add Bulk and Single Refresh certificate Actions
2026-07-20 19:14:38 -04:00
johnnyq
e134c89c3a
Add Bulk and Single Refresh Domain Actions
2026-07-20 18:54:01 -04:00
johnnyq
a35ef025dc
Add Expiring in Filter Field to assets, licenses, domains and certificate and wire that into the dashboard as well
2026-07-20 18:25:44 -04:00
johnnyq
ce0a62b0c3
Add Expiring Asset Warranties and Liceneses to the Dashboard
2026-07-20 17:45:03 -04:00
johnnyq
9cc7e5ff3c
Move Guest Function formatBytes to root shared functions and use in files and files section in contact
2026-07-16 20:25:18 -04:00
johnnyq
41d029937a
More Client Scoping fixes
2026-07-16 14:29:23 -04:00
johnnyq
1251944dcc
More Client Enforcement in modals across the app
2026-07-16 13:33:17 -04:00
johnnyq
2c09ce097c
More Client Enforcement in modals across the app
2026-07-16 13:10:02 -04:00
johnnyq
9e84ce4c07
Ticket Merge: EnforceClientAccess on modal and ticket list
2026-07-16 12:14:36 -04:00
johnnyq
e39ecb7ac9
Remove Legacy OTP code and fix guest view credential
2026-07-15 22:02:52 -04:00
johnnyq
86b0e11e95
Enforce ClientAccess in asset modal
2026-07-15 21:37:48 -04:00
