Commit Graph

37 Commits

Author SHA1 Message Date
705a54f9d8 case 4718 - report and translation import need create rights
report/upload and translation/upload had no role check, so any login, customer
contacts included, could import a report template (whose JavaScript runs in the
server's browser at render time) or a translation (security review F19, F24).
Both now require the same right as creating one, checked before the upload is
read. The import screens are already limited to those roles.

Checked locally: customer contact and Service 403, BizAdmin 202.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-24 12:10:00 -07:00
87a4946500 case 4586 - fuck it, everything is interdependent, just went for it, mostly buildable just reporting to fixup then testing after this 2024-05-09 22:56:53 +00:00
34cb37a276 2021-07-26 17:17:19 +00:00
23cc77d38c 2021-04-01 14:18:34 +00:00
dde1b8bb8c rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas 2021-03-23 17:06:05 +00:00
3c1a7fde79 2021-03-16 17:33:25 +00:00
22ac0d9189 2020-12-23 15:42:39 +00:00
9c65341b49 2020-12-15 01:25:55 +00:00
f7cb5ac0c3 2020-11-25 18:43:52 +00:00
3826d37174 2020-11-19 22:17:30 +00:00
bae2cc3519 2020-11-19 20:44:36 +00:00
ee2122929d 2020-11-19 20:17:34 +00:00
b18a87bdf5 2020-10-26 20:42:16 +00:00
b9f35d9d79 2020-09-07 15:50:24 +00:00
7ba1f47242 2020-07-31 00:04:57 +00:00
50901186d3 2020-06-27 14:01:23 +00:00
74650ad83d 2020-06-25 18:02:25 +00:00
d52be28f0c 2020-06-25 17:39:31 +00:00
2322135bb4 2020-06-25 17:34:46 +00:00
4412b3ca48 2020-06-25 17:24:10 +00:00
62a044e92e 2020-06-25 16:00:39 +00:00
248292fce2 2020-06-25 13:36:53 +00:00
cc16ed35f6 2020-06-24 19:39:35 +00:00
b9447951a8 2020-06-23 23:52:22 +00:00
746f60af15 2020-06-10 23:51:25 +00:00
7ffee42684 2020-06-10 13:53:59 +00:00
fd8c489914 changed all lambda experssion variables to z from various where appropriate 2020-05-18 19:42:42 +00:00
07390b6a31 Removed unused readOnly property on return response 2020-05-18 16:25:08 +00:00
f3405b4a27 2020-05-13 23:35:34 +00:00
539d590ce8 Rename ConcurrencyToken to Concurrency 2020-05-13 19:54:41 +00:00
cbc73f1602 Remove PATCH route and code 2020-05-13 19:24:18 +00:00
3117a3f09c 2020-05-07 23:32:49 +00:00
8e90d1ab26 2020-04-30 22:47:32 +00:00
4af7664dce server state cleanup 2020-04-05 23:02:18 +00:00
6253a838f6 2020-03-18 19:45:10 +00:00
d17e88db12 2020-03-06 20:45:26 +00:00
a234b3531d Locale -> Translation 2020-03-06 19:36:36 +00:00