793bd11dcf
remove member, invitation, and owner email disclosure from Teams/Show inertia props
...
The Teams/Show Inertia page serialized members, pending invitations, and the
owner email into props using only a belongsToTeam authorization gate, while
the corresponding API endpoints correctly enforced members:view and
invitations:view. The serialized data was unused by the live UI (the
TeamMemberManager partial that referenced it was orphaned), so dropping the
fields removes the disclosure surface without functional impact. The owner
card retains name and photo.
2026-05-18 19:04:57 +02:00
2ab28001be
Updated dependencies; Major update laravel passport
2025-07-17 11:47:34 +02:00
6ba0b19d40
change dashboard ui to use api instead of inertia props
2025-03-19 15:42:25 +01:00
50cc7053e4
hide total billable amounts from employees when employees_can_see_billable_rates is disabled
2025-03-10 15:43:08 +01:00
d924fa74ec
Moved force https logic to a middleware; Changed default for config session.secure
2025-02-08 10:40:15 -05:00
9e77500d94
Extended healthcheck debug in debug mode
2024-11-15 13:17:33 +01:00
cc10af0b97
Reduce overhead of health check endpoints
2024-09-12 15:31:20 +02:00
d8968399d6
Updated dependencies; Fixed codeformatting and phpstan
2024-09-11 18:07:35 +02:00
5b7df869ad
Added trial and blocking to billing contract, fixed bug in running time tracker command
2024-09-11 18:07:35 +02:00
7c26cee1ea
Added PHPUnit annotations
2024-07-01 17:06:44 +02:00
b6f5f77781
Added healthcheck endpoint tests
2024-05-19 12:04:25 +02:00
c194e3547b
Hide latestTeamActivity for members with employee role
2024-04-25 17:28:59 +02:00
bb42b0940a
Added extension system
2024-04-02 14:15:30 +02:00
4edfa7e941
Added tasks endpoints; Added more test
2024-03-22 11:41:51 +01:00
Gregor Vostrak
Constantin Graf