johnnyq
|
8ad8fd07b3
|
files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
|
2026-03-06 17:16:04 -05:00 |
|
johnnyq
|
a1931f59f8
|
services: remove client_id post from edit service modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 17:01:34 -05:00 |
|
johnnyq
|
e7b70c7992
|
domains: remove client_id post from edit domain modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:59:15 -05:00 |
|
johnnyq
|
7563148182
|
certificates: remove client_id post from edit certificate modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:53:20 -05:00 |
|
johnnyq
|
a252ff717e
|
Racks: remove client_id post from edit rack and add rack device modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:43:56 -05:00 |
|
johnnyq
|
7d41782013
|
Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:34:01 -05:00 |
|
johnnyq
|
91976cc415
|
Software: remove client_id post from edit software modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:23:53 -05:00 |
|
johnnyq
|
8afa2dbf75
|
Assets: remove client_id from edit asset modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:13:56 -05:00 |
|
johnnyq
|
3983c45cac
|
Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event
|
2026-03-06 15:59:18 -05:00 |
|
johnnyq
|
df5c350765
|
Vendors: enforceClientAccess in POST only if vendor is assigned a client, as vendor_client_id 0 is for global vendors
|
2026-03-06 15:43:44 -05:00 |
|
johnnyq
|
de8b9df4da
|
Projects: enforceClientAccess in POST only if a client is assigned to the project
|
2026-03-06 15:25:30 -05:00 |
|
johnnyq
|
3be815c749
|
Recurring tickets: enforceClientAccess in POST
|
2026-03-06 14:35:19 -05:00 |
|
johnnyq
|
71b19e125e
|
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
|
2026-03-06 14:09:51 -05:00 |
|
johnnyq
|
8fc3dfed1f
|
New Function enforceClientAccess() and added to contact post and client inc all This enforces user client access if set at post and in other places easily
|
2026-03-06 13:05:11 -05:00 |
|
johnnyq
|
f77bd4f0c6
|
Calendar: Add Delete Calendar, rename System calendar to Built-in calendar with builtin calendar names, moved calendar select on top for both edit / add event
|
2026-03-04 17:09:13 -05:00 |
|
johnnyq
|
9d9ebe7b9e
|
Added Bulk Net Terms editing in clients
|
2026-03-02 22:43:14 -05:00 |
|
johnnyq
|
90171064a8
|
document and files and folders: Add missing CSRF checks, add missing permission checks
|
2026-03-02 20:49:35 -05:00 |
|
johnnyq
|
6bbe887f8b
|
services: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:34:55 -05:00 |
|
johnnyq
|
b5fb14ec96
|
domains: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:32:20 -05:00 |
|
johnnyq
|
dd2ac00aa2
|
certificates: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:26:43 -05:00 |
|
johnnyq
|
e7b5e7120a
|
racks: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:22:36 -05:00 |
|
johnnyq
|
8bac4f9e53
|
networks: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:17:26 -05:00 |
|
johnnyq
|
023cb4ff11
|
credentials: Add missing CSRF checks
|
2026-03-02 20:11:56 -05:00 |
|
johnnyq
|
1740599b61
|
software licenses: Add missing CSRF checks, add missing permission checks
|
2026-03-02 19:37:27 -05:00 |
|
johnnyq
|
24b244b612
|
assets: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore
|
2026-03-02 19:32:45 -05:00 |
|
johnnyq
|
c71d1f190e
|
locations: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore
|
2026-03-02 19:15:52 -05:00 |
|
johnnyq
|
18e180eca5
|
Vendors: Check if client_id is set to enforce the right permission check. If client vendor then check client module otherwise check financial module
|
2026-03-02 18:40:07 -05:00 |
|
johnnyq
|
d936339f07
|
Contacts: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore
|
2026-03-02 18:28:53 -05:00 |
|
johnnyq
|
8a1335174d
|
Trips: Add missing CSRF checks, we may need another permission module check for trips for now only admin and financial lv3 can delete a trip
|
2026-03-02 17:50:04 -05:00 |
|
johnnyq
|
7b438e2889
|
Transfers: Add missing CSRF checks
|
2026-03-02 17:38:20 -05:00 |
|
johnnyq
|
550980719e
|
Accounts: Add missing CSRF checks
|
2026-03-02 17:35:18 -05:00 |
|
johnnyq
|
3d80d1519e
|
Recurring Expenses: Add missing CSRF, Add missing permission checks
|
2026-03-02 17:32:18 -05:00 |
|
johnnyq
|
1d5fceeecd
|
Expenses: Add missing CSRF, Add missing perms
|
2026-03-02 17:27:56 -05:00 |
|
johnnyq
|
5b49908438
|
Vendors: Add missing CSRF, need to update the permissions as a vendor can be client or global and permissions need to be set based off if the referal url has client_id or not
|
2026-03-02 17:20:00 -05:00 |
|
johnnyq
|
7e515afb79
|
Payments: Add missing CSRF and additonal perm check
|
2026-03-02 16:38:17 -05:00 |
|
wrongecho
|
dee5085f4a
|
Allow associating a quote with a ticket
|
2026-03-02 10:54:44 +00:00 |
|
wrongecho
|
795144b288
|
Fix documents => files redirect after deletion (since we merged these)
|
2026-03-02 08:12:07 +00:00 |
|
johnnyq
|
36ac006438
|
Products: Add missing CSRF checks change wording from unarchive to restore
|
2026-03-01 22:50:04 -05:00 |
|
johnnyq
|
af1ebfea41
|
Revenues: Add missing CSRF checks
|
2026-03-01 22:42:37 -05:00 |
|
johnnyq
|
f653752026
|
Recurring Invoice: Add missing CSRF checks and missing permissions in POST
|
2026-03-01 22:37:51 -05:00 |
|
johnnyq
|
4440581f14
|
Invoice: Add missing CSRF checks and missing permissions
|
2026-03-01 22:22:21 -05:00 |
|
johnnyq
|
2c47001b19
|
Quote: Add missing CSRF checks and missing permission on export quote pdf
|
2026-03-01 22:02:43 -05:00 |
|
johnnyq
|
e1daa14087
|
Calendar: Add missing CSRF checks
|
2026-03-01 21:52:28 -05:00 |
|
johnnyq
|
308dc6e550
|
Ticket Tasks: Add missing CSRF checks and other CSRF checks missed in he previous commits
|
2026-03-01 21:45:26 -05:00 |
|
johnnyq
|
54638428e3
|
rename unarchive project to restore project
|
2026-03-01 21:32:24 -05:00 |
|
johnnyq
|
1508e6b055
|
Project: Add missing CSRF checks
|
2026-03-01 21:30:41 -05:00 |
|
johnnyq
|
9213249f7b
|
Recurring Ticket: Add missing CSRF checks
|
2026-03-01 21:21:37 -05:00 |
|
johnnyq
|
63f6faf1e8
|
Ticket: Add missing CSRF checks
|
2026-03-01 21:14:58 -05:00 |
|
johnnyq
|
ef1b65de09
|
Client: Add missing CSRF checks, and missing enforcements
|
2026-03-01 20:42:18 -05:00 |
|
johnnyq
|
adb43703ed
|
Update Networks, remove subnet mask in favor of CIDR, Global View show clients in first column, allow for IPv6 and provide IPv6 placeholder examples, gateway no longer required reword DHCP Range to IP Range moved DNS to the end, chnaged out some icons
|
2026-02-28 18:41:03 -05:00 |
|