johnnyq
|
b394f484d3
|
Fix Vars add empty value placeholder for Ticket Frequency
|
2026-03-09 15:29:22 -04:00 |
|
johnnyq
|
ada336ceea
|
Update var names
|
2026-03-09 15:16:29 -04:00 |
|
johnnyq
|
5bd21a2bd4
|
add .unifi to the allowed extensions on file uploads
|
2026-03-09 11:22:46 -04:00 |
|
johnnyq
|
e2547122a6
|
Update Var naming schemes to match the post var name
|
2026-03-08 14:25:12 -04:00 |
|
johnnyq
|
edad83cc37
|
Fix Regression of chnage post name from client to client_id Add / Edit Expense
|
2026-03-08 13:43:46 -04:00 |
|
johnnyq
|
6122efc870
|
Updated all Queries related to invoice items to reflect their new tables quote, invoice, recurring invoice items
|
2026-03-07 19:35:44 -05:00 |
|
johnnyq
|
8dbbef37bb
|
Fix file upload missing client_id
|
2026-03-07 16:50:11 -05:00 |
|
johnnyq
|
6d2cb0aea3
|
Split out item edits into seperate posts and modals for editing invoice, quote and recurring invoice items
|
2026-03-07 12:12:27 -05:00 |
|
johnnyq
|
c8273b2052
|
Client related modal and post move client_id get after post
|
2026-03-07 11:48:56 -05:00 |
|
johnnyq
|
60b6c245ef
|
Change expense client to client_id post var
|
2026-03-06 18:40:01 -05:00 |
|
johnnyq
|
fcf098f494
|
use client_id as post var name not client
|
2026-03-06 18:33:25 -05:00 |
|
johnnyq
|
74ce8f4e98
|
Trips: enforceClientAccess only if client is referenced
|
2026-03-06 18:26:14 -05:00 |
|
johnnyq
|
6e3a36d8c4
|
payments: enforceClientAccess
|
2026-03-06 18:20:58 -05:00 |
|
johnnyq
|
6f0a2a5a73
|
quotes: enforceClientAccess
|
2026-03-06 18:11:35 -05:00 |
|
johnnyq
|
111a30f13c
|
recurring invoices: enforceClientAccess
|
2026-03-06 18:01:20 -05:00 |
|
johnnyq
|
202f55c2ff
|
invoices: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
|
2026-03-06 17:53:44 -05:00 |
|
johnnyq
|
8ad8fd07b3
|
files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
|
2026-03-06 17:16:04 -05:00 |
|
johnnyq
|
a1931f59f8
|
services: remove client_id post from edit service modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 17:01:34 -05:00 |
|
johnnyq
|
e7b70c7992
|
domains: remove client_id post from edit domain modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:59:15 -05:00 |
|
johnnyq
|
7563148182
|
certificates: remove client_id post from edit certificate modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:53:20 -05:00 |
|
johnnyq
|
a252ff717e
|
Racks: remove client_id post from edit rack and add rack device modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:43:56 -05:00 |
|
johnnyq
|
7d41782013
|
Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:34:01 -05:00 |
|
johnnyq
|
91976cc415
|
Software: remove client_id post from edit software modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:23:53 -05:00 |
|
johnnyq
|
8afa2dbf75
|
Assets: remove client_id from edit asset modal as it should get the client_id in post, enforceClientAccess
|
2026-03-06 16:13:56 -05:00 |
|
johnnyq
|
3983c45cac
|
Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event
|
2026-03-06 15:59:18 -05:00 |
|
johnnyq
|
df5c350765
|
Vendors: enforceClientAccess in POST only if vendor is assigned a client, as vendor_client_id 0 is for global vendors
|
2026-03-06 15:43:44 -05:00 |
|
johnnyq
|
de8b9df4da
|
Projects: enforceClientAccess in POST only if a client is assigned to the project
|
2026-03-06 15:25:30 -05:00 |
|
johnnyq
|
3be815c749
|
Recurring tickets: enforceClientAccess in POST
|
2026-03-06 14:35:19 -05:00 |
|
johnnyq
|
71b19e125e
|
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
|
2026-03-06 14:09:51 -05:00 |
|
johnnyq
|
8fc3dfed1f
|
New Function enforceClientAccess() and added to contact post and client inc all This enforces user client access if set at post and in other places easily
|
2026-03-06 13:05:11 -05:00 |
|
johnnyq
|
f77bd4f0c6
|
Calendar: Add Delete Calendar, rename System calendar to Built-in calendar with builtin calendar names, moved calendar select on top for both edit / add event
|
2026-03-04 17:09:13 -05:00 |
|
johnnyq
|
9d9ebe7b9e
|
Added Bulk Net Terms editing in clients
|
2026-03-02 22:43:14 -05:00 |
|
johnnyq
|
90171064a8
|
document and files and folders: Add missing CSRF checks, add missing permission checks
|
2026-03-02 20:49:35 -05:00 |
|
johnnyq
|
6bbe887f8b
|
services: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:34:55 -05:00 |
|
johnnyq
|
b5fb14ec96
|
domains: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:32:20 -05:00 |
|
johnnyq
|
dd2ac00aa2
|
certificates: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:26:43 -05:00 |
|
johnnyq
|
e7b5e7120a
|
racks: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:22:36 -05:00 |
|
johnnyq
|
8bac4f9e53
|
networks: Add missing CSRF checks rename unarchive to restore
|
2026-03-02 20:17:26 -05:00 |
|
johnnyq
|
023cb4ff11
|
credentials: Add missing CSRF checks
|
2026-03-02 20:11:56 -05:00 |
|
johnnyq
|
1740599b61
|
software licenses: Add missing CSRF checks, add missing permission checks
|
2026-03-02 19:37:27 -05:00 |
|
johnnyq
|
24b244b612
|
assets: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore
|
2026-03-02 19:32:45 -05:00 |
|
johnnyq
|
c71d1f190e
|
locations: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore
|
2026-03-02 19:15:52 -05:00 |
|
johnnyq
|
18e180eca5
|
Vendors: Check if client_id is set to enforce the right permission check. If client vendor then check client module otherwise check financial module
|
2026-03-02 18:40:07 -05:00 |
|
johnnyq
|
d936339f07
|
Contacts: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore
|
2026-03-02 18:28:53 -05:00 |
|
johnnyq
|
8a1335174d
|
Trips: Add missing CSRF checks, we may need another permission module check for trips for now only admin and financial lv3 can delete a trip
|
2026-03-02 17:50:04 -05:00 |
|
johnnyq
|
7b438e2889
|
Transfers: Add missing CSRF checks
|
2026-03-02 17:38:20 -05:00 |
|
johnnyq
|
550980719e
|
Accounts: Add missing CSRF checks
|
2026-03-02 17:35:18 -05:00 |
|
johnnyq
|
3d80d1519e
|
Recurring Expenses: Add missing CSRF, Add missing permission checks
|
2026-03-02 17:32:18 -05:00 |
|
johnnyq
|
1d5fceeecd
|
Expenses: Add missing CSRF, Add missing perms
|
2026-03-02 17:27:56 -05:00 |
|
johnnyq
|
5b49908438
|
Vendors: Add missing CSRF, need to update the permissions as a vendor can be client or global and permissions need to be set based off if the referal url has client_id or not
|
2026-03-02 17:20:00 -05:00 |
|