johnnyq c509b7f693 Add user-based RBAC for API keys ...

API keys now run as a user and inherit that user's module, operation, and client permissions. Drops per-key client scoping and removes existing keys (must be recreated). Adds an edit modal to change a key's user.

2026-07-25 16:50:58 -04:00

..

css

rename /user/ to /agent/ and update links to use agent/ instead

2025-09-23 18:04:23 -04:00

custom

Removed the last of legacy validate functions and replaced with the new enforce fumctions.

2026-07-14 16:49:14 -04:00

includes

Make better use of formatAddress function for clients listing

2026-07-24 12:22:15 -04:00

js

Feature: Add new js function to retrieve and Audit log Password reveals, still need to get the edit modals

2026-07-15 20:32:50 -04:00

modals

Fix Client Permission overides to include deny allow list in projects prohect and edit ticket

2026-07-25 13:28:47 -04:00

post

Add user-based RBAC for API keys

2026-07-25 16:50:58 -04:00

reports

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

user

Updated validateCSRFToken to automatically grab and compare get or post csrf token no longer need to pass an argument to the function which fixed the issue if no hash was present

2026-07-24 13:40:37 -04:00

accounts.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

ajax.php

Add more enforceClientAccess to agent ajax gets

2026-07-24 22:51:57 -04:00

asset.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

assets.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

calendar.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

certificates.php

Add Bulk and Single Refresh certificate Actions

2026-07-20 19:14:38 -04:00

client_autopay.php

Use stripe_init include to init stripe and updated code everywhere

2026-07-23 13:00:01 -04:00

client_overview.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

clients.php

Make better use of formatAddress function for clients listing

2026-07-24 12:22:15 -04:00

contact.php

Move Guest Function formatBytes to root shared functions and use in files and files section in contact

2026-07-16 20:25:18 -04:00

contacts.php

Remove _details and use singular filename for certain objects

2026-07-15 00:12:27 -04:00

credentials.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

dashboard.php

Add Expiring in Filter Field to assets, licenses, domains and certificate and wire that into the dashboard as well

2026-07-20 18:25:44 -04:00

document.php

Add secure file handler for client ticket attachment and file view along with client and contact permission isolation, add the handler links in asset and contact

2026-07-15 18:35:32 -04:00

domains.php

Add Bulk and Single Refresh Domain Actions

2026-07-20 18:54:01 -04:00

expenses.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

file.php

Feature: Secure File Download Handler Implemented

2026-07-15 13:11:02 -04:00

files.php

Update the rest of the PHP functions to use camelCase

2026-07-23 17:39:06 -04:00

global_search.php

Global Search: use secure file handler on files in global search

2026-07-15 18:55:40 -04:00

index.php

rename /user/ to /agent/ and update links to use agent/ instead

2025-09-23 18:04:23 -04:00

invoice.php

Add formatAddress function and replace all addresses with it

2026-07-23 18:10:39 -04:00

invoices.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

locations.php

Make better use of formatAddress function for clients listing

2026-07-24 12:22:15 -04:00

networks.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

notifications.php

UI: Add Monospace font to timestamps in notifications listing

2026-07-15 18:59:05 -04:00

payments.php

Replace Function sanitizeInput() with just escapeSql() and update all instances throughout

2026-07-14 17:17:50 -04:00

post.php

Clean up agent post handler

2026-07-15 18:45:27 -04:00

products.php

Update skipped function renames in anything named vendor

2026-07-14 19:09:32 -04:00

project.php

Fix Client Permission overides to include deny allow list in projects prohect and edit ticket

2026-07-25 13:28:47 -04:00

projects.php

Fix Client Permission overides to include deny allow list in projects prohect and edit ticket

2026-07-25 13:28:47 -04:00

quote.php

Add formatAddress function and replace all addresses with it

2026-07-23 18:10:39 -04:00

quotes.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

racks.php

Remove _details and use singular filename for certain objects

2026-07-15 00:12:27 -04:00

recurring_expenses.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

recurring_invoice.php

Add formatAddress function and replace all addresses with it

2026-07-23 18:10:39 -04:00

recurring_invoices.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

recurring_tickets.php

Update skipped function renames in anything named vendor

2026-07-14 19:09:32 -04:00

revenues.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

services.php

Fix broken link to service modal in services

2026-07-23 13:48:00 -04:00

software.php

Add Expiring in Filter Field to assets, licenses, domains and certificate and wire that into the dashboard as well

2026-07-20 18:25:44 -04:00

ticket_attachment.php

Feature: Secure File Download Handler for ticket attachments Implemented

2026-07-15 13:42:19 -04:00

ticket_kanban.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

ticket_list.php

Remove _details and use singular filename for certain objects

2026-07-15 00:12:27 -04:00

ticket.php

More Client Scoping fixes

2026-07-16 14:29:23 -04:00

tickets.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

transactions.php

Feature: Add Transactions, reorg Main side nav

2026-07-21 13:21:23 -04:00

transfers.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

trips.php

Replace Function nullable_htmlentities() with just escapeHtml() and update all instances throughout

2026-07-14 17:10:45 -04:00

vendors.php

Update skipped function renames in anything named vendor

2026-07-14 19:09:32 -04:00