johnnyq 8ad8fd07b3 files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess

2026-03-06 17:16:04 -05:00

..

account

Accounts: Add missing CSRF checks

2026-03-02 17:35:18 -05:00

asset

Assets: remove client_id from edit asset modal as it should get the client_id in post, enforceClientAccess

2026-03-06 16:13:56 -05:00

calendar

Calendar Events: use client_id instead of client in POST and enforceClientAccess if client is assigned to an event

2026-03-06 15:59:18 -05:00

certificate

certificates: remove client_id post from edit certificate modal as it should get the client_id in post, enforceClientAccess

2026-03-06 16:53:20 -05:00

client

Added Bulk Net Terms editing in clients

2026-03-02 22:43:14 -05:00

contact

Contacts: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore

2026-03-02 18:28:53 -05:00

credential

Credential: remove client_id post from edit credential modal as it should get the client_id in post, enforceClientAccess

2026-03-06 16:34:01 -05:00

document

files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess

2026-03-06 17:16:04 -05:00

domain

domains: remove client_id post from edit domain modal as it should get the client_id in post, enforceClientAccess

2026-03-06 16:59:15 -05:00

expense

Expenses: Add missing CSRF, Add missing perms

2026-03-02 17:27:56 -05:00

file

files, folders, documents: remove client_id post from edit and link modals as it should get the client_id in post, enforceClientAccess

2026-03-06 17:16:04 -05:00

folder

Add hidden form field to folder modals as well

2026-03-02 20:51:12 -05:00

invoice

Invoice: Add missing CSRF checks and missing permissions

2026-03-01 22:22:21 -05:00

location

locations: Add missing CSRF checks, add missing permission checks, renamed unarchive to restore

2026-03-02 19:15:52 -05:00

network

networks: Add missing CSRF checks rename unarchive to restore

2026-03-02 20:17:26 -05:00

payment

Payments: Add missing CSRF and additonal perm check

2026-03-02 16:38:17 -05:00

product

Products: Add missing CSRF checks change wording from unarchive to restore

2026-03-01 22:50:04 -05:00

project

Project: Add missing CSRF checks

2026-03-01 21:30:41 -05:00

quote

Quote: Add missing CSRF checks and missing permission on export quote pdf

2026-03-01 22:02:43 -05:00

rack

Racks: remove client_id post from edit rack and add rack device modal as it should get the client_id in post, enforceClientAccess

2026-03-06 16:43:56 -05:00

recurring_expense

Recurring Expenses: Add missing CSRF, Add missing permission checks

2026-03-02 17:32:18 -05:00

recurring_invoice

Recurring Invoice: Add missing CSRF checks and missing permissions in POST

2026-03-01 22:37:51 -05:00

recurring_ticket

Recurring Ticket: Add missing CSRF checks

2026-03-01 21:21:37 -05:00

revenue

Revenues: Add missing CSRF checks

2026-03-01 22:42:37 -05:00

service

services: remove client_id post from edit service modal as it should get the client_id in post, enforceClientAccess

2026-03-06 17:01:34 -05:00

software

Software: remove client_id post from edit software modal as it should get the client_id in post, enforceClientAccess

2026-03-06 16:23:53 -05:00

ticket

Allow associating a quote with a ticket

2026-03-02 10:54:44 +00:00

transfer

Transfers: Add missing CSRF checks

2026-03-02 17:38:20 -05:00

trip

Trips: Add missing CSRF checks, we may need another permission module check for trips for now only admin and financial lv3 can delete a trip

2026-03-02 17:50:04 -05:00

vendor

Vendors: Add missing CSRF, need to update the permissions as a vendor can be client or global and permissions need to be set based off if the referal url has client_id or not

2026-03-02 17:20:00 -05:00

share_modal.php

Add CSRF Checks on Agent ajax endpoints that would update / delete or add something to the db

2026-03-05 17:12:44 -05:00

top_nav_tickets_modal.php

rename /user/ to /agent/ and update links to use agent/ instead

2025-09-23 18:04:23 -04:00