0ff2aac58b
API+UI: Use observers ton prevent double logging on restores
2026-08-17 12:50:19 +01:00
c0f4949338
Merge remote-tracking branch 'origin/develop'
2026-07-31 12:44:46 +01:00
8ea374937f
Added bulk action options tests
2026-07-31 12:43:20 +01:00
2114712558
Merge remote-tracking branch 'origin/develop'
2026-07-31 06:26:08 +01:00
836f37f854
Fixed FD-56789 - tighten user API company controls
2026-07-31 05:28:04 +01:00
f57a605331
Merge remote-tracking branch 'origin/develop'
2026-07-29 15:26:21 +01:00
38bcae38d0
Added GATED_AUTH_FIELDS to keep auth gated fields consistent
2026-07-29 15:20:46 +01:00
02f62c8dce
Fixed FD-56664 - tightened activated gate
2026-07-29 12:40:37 +01:00
3c1cfa4d6e
Handle malformed company IDs payload
2026-07-28 08:45:31 +01:00
7865bc56e3
Print Views: Fixed FD-56677 - Tighter constraints on print views
2026-07-25 16:45:12 +01:00
17c9721c4f
Removed unused variable
2026-07-23 17:38:42 +01:00
bb86c884ba
User Create/Edit: Added #19213 - allow skipping password if user cannot login
2026-07-23 17:03:15 +01:00
af74e17a1b
Tweaks to make codacy happy
2026-07-23 15:08:58 +01:00
73e2575e98
Added transfer from one user to another
2026-07-22 17:16:35 +01:00
b9672dc238
Accoutn for deliberate null company pseudo company
2026-07-22 11:45:31 +01:00
b8018c5b5e
FMCS+Floater: Fixed #19192 - make company required
2026-07-22 11:17:55 +01:00
95eb43650e
Fixed #19334 - added pagination to user’s assets API endpoint
2026-07-21 17:27:30 +01:00
115d1a4f5e
Rename company_id on users table
2026-07-10 14:41:47 +01:00
09b5ae2c9e
Fixed failing test on GH
...
Local dev uses SQLite which is loose about column types and stored '' as literal empty string. Github’s CI uses MySQL which enforces the tinyInteger column type and coerced '' to 0. The middleware's off-signal check is $settings->two_factor_enabled != '', which in PHP 8 evaluates '0' != '' as true (unlike PHP 7), so on MySQL the middleware entered the redirect flow.
2026-07-09 11:18:47 +01:00
2ee655e739
Make impersonation note required
2026-07-08 10:22:58 +01:00
712256211d
Fixed location scoping on user edit
2026-07-08 09:27:03 +01:00
e4fa0b463c
Clean up
2026-07-07 21:46:59 +01:00
4675e4bbd9
Superadmin: Added ability to login (impersonate) another user
2026-07-07 20:49:19 +01:00
3611fc9df5
More FMCS scoping tests
2026-07-07 10:01:42 +01:00
77f9b49f7c
Updated tests
2026-07-07 09:24:09 +01:00
b96f5664db
Small FMCS fix
2026-07-07 09:18:14 +01:00
d1a635d8b9
Merge remote-tracking branch 'origin/develop' into _floater-mode-superuser-gate
2026-07-02 13:54:24 +01:00
19c986d0c4
Added tests
2026-06-29 17:20:48 +01:00
c087843475
Added test
2026-06-26 15:07:53 +01:00
d58e757d37
Reverter tighter scope, updated tests
2026-06-26 12:44:13 +01:00
b78aedeec2
Added stricter gate checks with FMCS and floater mode is on
2026-06-25 19:29:06 +01:00
cb68b70ed1
Fixed test
2026-06-22 16:16:20 +01:00
1efd470a77
Bulk User Edit Logging: Fixed #19193 - log parity in bulk as for regular user edit
2026-06-16 18:50:46 +01:00
22c76899aa
Added more floater tests
2026-06-15 15:26:38 +01:00
d3f10ee776
Pint
2026-06-15 15:18:20 +01:00
a6c82eec7b
Location Scoping: Fixed ordering for company check on user save
...
The model save fires before companies are synced, so company_id is stale data, which was causing it to erroneously fail validation. the rule was always wrong in that context for updates. The form request owns this check now.
2026-06-15 15:18:09 +01:00
f4cac96358
Apply scope to print page
2026-06-09 12:18:50 +01:00
144772cfbe
Fixed tests
2026-06-08 21:41:22 +01:00
00d4d6c7a8
Don’t strip comany association if company_id is passed to the user (old integrations)
2026-06-03 12:30:08 +01:00
a6e55fb462
Fixed #19130 - normalize null and 0 in permissions array, since they mean the same
2026-06-03 11:33:48 +01:00
9c2495af29
Fixed #19131 - tighter validation for company_id/company_ids
2026-06-03 11:21:44 +01:00
4145f64399
Exclude current id on checkin pages
2026-05-29 10:50:10 +01:00
cd5716d66d
Fixed FD-54447 - superuser on user bulk edit check for groups
2026-05-26 11:03:07 +01:00
f23ea5ce8f
Disallow ldap_import and activated in bulk editing users if user doesn’t have permission
2026-05-26 11:02:35 +01:00
c893b69b5f
Fixed merge conflict
2026-05-26 10:52:04 +01:00
d74197aacc
Disallow ldap_import and activated in bulk editing users if user doesn’t have permission
2026-05-26 10:47:40 +01:00
518351eba1
Fixed FD-54447 - superuser on user bulk edit check for groups
2026-05-26 10:40:45 +01:00
43be1e8364
Fixed FD-55580 - added selectlist gate and tests
2026-05-26 10:40:26 +01:00
6e55d78c19
Fixed tests
2026-05-26 10:40:02 +01:00
67fa473281
Pint
2026-05-26 10:40:02 +01:00
