John Cardinal 692fececc7 case 4716 - unit pick-list customer variant parsed as a number ...

UnitPickList.GetVariantCriteria put the value of a "customerid:<value>"
variant from the request into the query unparsed, reachable by any login
(security review F43, found during case 4712). The value is now parsed as a
long; anything else means no restriction, as 0 already did. The client's
format ("customerid: 5") still works.

Checked: new test fails on the old code, passes now; pick-list tests 10/10.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 14:08:01 -07:00

..

AyaPickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

AyaPickListFieldDefinition.cs

2020-03-29 00:47:19 +00:00

ContractPickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

CustomerPickList.cs

2023-11-02 22:36:17 +00:00

HeadOfficePickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

IAyaPickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

IAyaPickListVariant.cs

2020-12-15 19:17:28 +00:00

LoanUnitPickList.cs

2021-09-10 23:50:20 +00:00

PartAssemblyPickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

PartPickList.cs

case 4025 replaced partnumber with partname and changed partname to partdescription

2021-11-22 20:30:03 +00:00

PartWarehousePickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

PickListFactory.cs

De-Templatization for ALL THE THINGS!!

2021-07-23 20:00:20 +00:00

PickListFetcher.cs

case 4716 - pick-list search text passed as SQL parameters

2026-10-24 12:28:43 -07:00

PickListOptions.cs

2022-01-06 23:34:27 +00:00

PickListSqlBuilder.cs

case 4716 - pick-list search text passed as SQL parameters

2026-10-24 12:28:43 -07:00

ProjectPickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

ReportPickList.cs

2021-06-15 20:14:33 +00:00

ServiceRatePickList.cs

2021-05-19 18:58:04 +00:00

TaskGroupPickList.cs

2021-05-25 13:58:34 +00:00

TaxCodePickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00

TravelRatePickList.cs

2021-05-19 18:58:04 +00:00

UnitModelPickList.cs

case 3999

2021-10-14 23:19:12 +00:00

UnitPickList.cs

case 4716 - unit pick-list customer variant parsed as a number

2026-10-24 14:08:01 -07:00

UserPickList.cs

2021-05-07 23:10:21 +00:00

VendorPickList.cs

rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas

2021-03-23 17:06:05 +00:00