AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-03-11 08:14:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
7d417820136a56631bfaeefb1587c1e7344eb9e1
itflow/agent/post
History
johnnyq 7d41782013 Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:34:01 -05:00
..
account.php
Accounts: Add missing CSRF checks
2026-03-02 17:35:18 -05:00
asset_interface_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
asset_model.php
Feature: Favorites added to assets, Bulk Fav/unfav, adds favs to client overview
2026-02-03 22:23:20 -05:00
asset.php
Assets: remove client_id from edit asset modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:13:56 -05:00
category_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
category.php
document and files and folders: Add missing CSRF checks, add missing permission checks
2026-03-02 20:49:35 -05:00
certificate_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
certificate.php
certificates: Add missing CSRF checks rename unarchive to restore
2026-03-02 20:26:43 -05:00
client_model.php
Update Add Client to use prepared statments
2025-11-21 20:53:04 -05:00
client.php
Added Bulk Net Terms editing in clients
2026-03-02 22:43:14 -05:00
contact_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
contact.php
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
2026-03-06 14:09:51 -05:00
credential_model.php
Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:34:01 -05:00
credential.php
Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:34:01 -05:00
credit.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
document_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
document.php
document and files and folders: Add missing CSRF checks, add missing permission checks
2026-03-02 20:49:35 -05:00
domain_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
domain.php
domains: Add missing CSRF checks rename unarchive to restore
2026-03-02 20:32:20 -05:00
event_model.php
Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event
2026-03-06 15:59:18 -05:00
event.php
Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event
2026-03-06 15:59:18 -05:00
expense_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
expense.php
Expenses: Add missing CSRF, Add missing perms
2026-03-02 17:27:56 -05:00
file.php
document and files and folders: Add missing CSRF checks, add missing permission checks
2026-03-02 20:49:35 -05:00
folder.php
document and files and folders: Add missing CSRF checks, add missing permission checks
2026-03-02 20:49:35 -05:00
invoice_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
invoice.php
Invoice: Add missing CSRF checks and missing permissions
2026-03-01 22:22:21 -05:00
location_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
location.php
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
2026-03-06 14:09:51 -05:00
network_model.php
Update Networks, remove subnet mask in favor of CIDR, Global View show clients in first column, allow for IPv6 and provide IPv6 placeholder examples, gateway no longer required reword DHCP Range to IP Range moved DNS to the end, chnaged out some icons
2026-02-28 18:41:03 -05:00
network.php
networks: Add missing CSRF checks rename unarchive to restore
2026-03-02 20:17:26 -05:00
payment.php
Payments: Add missing CSRF and additonal perm check
2026-03-02 16:38:17 -05:00
product_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
product.php
Products: Add missing CSRF checks change wording from unarchive to restore
2026-03-01 22:50:04 -05:00
project.php
Projects: enforceClientAccess in POST only if a client is assigned to the project
2026-03-06 15:25:30 -05:00
quote_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
quote.php
Allow associating a quote with a ticket
2026-03-02 10:54:44 +00:00
rack.php
racks: Add missing CSRF checks rename unarchive to restore
2026-03-02 20:22:36 -05:00
recurring_expense.php
Recurring Expenses: Add missing CSRF, Add missing permission checks
2026-03-02 17:32:18 -05:00
recurring_invoice.php
Recurring Invoice: Add missing CSRF checks and missing permissions in POST
2026-03-01 22:37:51 -05:00
recurring_ticket.php
Recurring tickets: enforceClientAccess in POST
2026-03-06 14:35:19 -05:00
revenue.php
Revenues: Add missing CSRF checks
2026-03-01 22:42:37 -05:00
service.php
services: Add missing CSRF checks rename unarchive to restore
2026-03-02 20:34:55 -05:00
software.php
Software: remove client_id post from edit software modal as it should get the client_id in post, enforceClientAccess
2026-03-06 16:23:53 -05:00
tag_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
tag.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
task.php
Ticket Tasks: Add missing CSRF checks and other CSRF checks missed in he previous commits
2026-03-01 21:45:26 -05:00
ticket_recurring_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
ticket.php
Locations and tickets enforceClientAccess in POST fix a few missing client_id vars which were bale to be used for logging too
2026-03-06 14:09:51 -05:00
transfer_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
transfer.php
Transfers: Add missing CSRF checks
2026-03-02 17:38:20 -05:00
trip_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
trip.php
Trips: Add missing CSRF checks, we may need another permission module check for trips for now only admin and financial lv3 can delete a trip
2026-03-02 17:50:04 -05:00
vendor_contact_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
vendor_contact.php
Vendors: Add missing CSRF, need to update the permissions as a vendor can be client or global and permissions need to be set based off if the referal url has client_id or not
2026-03-02 17:20:00 -05:00
vendor_model.php
rename /user/ to /agent/ and update links to use agent/ instead
2025-09-23 18:04:23 -04:00
vendor.php
Vendors: enforceClientAccess in POST only if vendor is assigned a client, as vendor_client_id 0 is for global vendors
2026-03-06 15:43:44 -05:00