AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-03-11 08:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
111a30f13c635dbc49c8ae2b29841e4a8e040e82
itflow/agent/post
History
johnnyq 111a30f13c recurring invoices: enforceClientAccess
2026-03-06 18:01:20 -05:00
..
account.php
Accounts: Add missing CSRF checks
2026-03-02 17:35:18 -05:00
asset_interface_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
asset_model.php
Feature: Favorites added to assets, Bulk Fav/unfav, adds favs to client overview
2026-02-03 22:23:20 -05:00
asset.php
Assets: remove client_id from edit asset modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:13:56 -05:00
category_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
category.php
document and files and folders: Add missing CSRF checks, add missing permission checks
2026-03-02 20:49:35 -05:00
certificate_model.php
certificates: remove client_id post from edit certificate modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:53:20 -05:00
certificate.php
certificates: remove client_id post from edit certificate modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:53:20 -05:00
client_model.php
Update Add Client to use prepared statments
2025-11-21 20:53:04 -05:00
client.php
Added Bulk Net Terms editing in clients
2026-03-02 22:43:14 -05:00
contact_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
contact.php
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
2026-03-06 14:09:51 -05:00
credential_model.php
Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:34:01 -05:00
credential.php
Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:34:01 -05:00
credit.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
document_model.php
files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
2026-03-06 17:16:04 -05:00
document.php
files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
2026-03-06 17:16:04 -05:00
domain_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
domain.php
domains: remove client_id post from edit domain modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:59:15 -05:00
event_model.php
Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event
2026-03-06 15:59:18 -05:00
event.php
Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event
2026-03-06 15:59:18 -05:00
expense_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
expense.php
Expenses: Add missing CSRF, Add missing perms
2026-03-02 17:27:56 -05:00
file.php
files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
2026-03-06 17:16:04 -05:00
folder.php
files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
2026-03-06 17:16:04 -05:00
invoice_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
invoice.php
invoices: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess
2026-03-06 17:53:44 -05:00
location_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
location.php
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
2026-03-06 14:09:51 -05:00
network_model.php
Racks: remove client_id post from edit rack and add rack device modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:43:56 -05:00
network.php
Racks: remove client_id post from edit rack and add rack device modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:43:56 -05:00
payment.php
Payments: Add missing CSRF and additonal perm check
2026-03-02 16:38:17 -05:00
product_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
product.php
Products: Add missing CSRF checks change wording from unarchive to restore
2026-03-01 22:50:04 -05:00
project.php
Projects: enforceClientAccess in POST only if a client is assigned to the project
2026-03-06 15:25:30 -05:00
quote_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
quote.php
Allow associating a quote with a ticket
2026-03-02 10:54:44 +00:00
rack.php
Racks: remove client_id post from edit rack and add rack device modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:43:56 -05:00
recurring_expense.php
Recurring Expenses: Add missing CSRF, Add missing permission checks
2026-03-02 17:32:18 -05:00
recurring_invoice.php
recurring invoices: enforceClientAccess
2026-03-06 18:01:20 -05:00
recurring_ticket.php
Recurring tickets: enforceClientAccess in POST
2026-03-06 14:35:19 -05:00
revenue.php
Revenues: Add missing CSRF checks
2026-03-01 22:42:37 -05:00
service.php
services: remove client_id post from edit service modal as it should get the client_id in post, enforceClientAccess
2026-03-06 17:01:34 -05:00
software.php
Software: remove client_id post from edit software modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:23:53 -05:00
tag_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
tag.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
task.php
Ticket Tasks: Add missing CSRF checks and other CSRF checks missed in he previous commits
2026-03-01 21:45:26 -05:00
ticket_recurring_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
ticket.php
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
2026-03-06 14:09:51 -05:00
transfer_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
transfer.php
Transfers: Add missing CSRF checks
2026-03-02 17:38:20 -05:00
trip_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
trip.php
Trips: Add missing CSRF checks, we may need another permission module check for trips for now only admin and financial lv3 can delete a trip
2026-03-02 17:50:04 -05:00
vendor_contact_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
vendor_contact.php
Vendors: Add missing CSRF, need to update the permissions as a vendor can be client or global and permissions need to be set based off if the referal url has client_id or not
2026-03-02 17:20:00 -05:00
vendor_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
vendor.php
Vendors: enforceClientAccess in POST only if vendor is assigned a client, as vendor_client_id 0 is for global vendors
2026-03-06 15:43:44 -05:00