snipe-it/app
Till Deeke 48bbbe0f40 Fixing authorization issues (#5807)
* adds permission checks for companies

* adds permission checks for depreciations

* adds permission check for all reports

* fixes permissions for departments

* fixes permission naming (edit -> update)

* fixes authorization checking wrong permission in API

The authorization was checking for the non-existent „edit“ method where it should have checked for the „update“ method.

* adds authorization checks for select2 lists

* adds missing authorization checks for api

* fixes user authorization check for creating users

* adds additional check viewing assets on showing a users assets

* Removes authorization checks for select2 lists

Reference: https://github.com/snipe/snipe-it/pull/5807#pullrequestreview-136018755
2018-07-12 18:28:02 -07:00
..
Console Check for > 0 expected assets 2018-05-21 15:41:19 -07:00
Events Version 3 - hold onto your butts 2016-03-25 01:18:05 -07:00
Exceptions Fix standardized exception formatter for correct payload 2017-10-24 17:57:49 -07:00
Helpers Fix for #4901 (#5829) 2018-07-12 16:45:12 -07:00
Http Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
Importer Importer2 checkout (#5771) 2018-07-05 12:22:24 -07:00
Jobs Version 3 - hold onto your butts 2016-03-25 01:18:05 -07:00
LegacyEncrypter First stab at a recrypter for legacy mcrypt conversion 2017-08-21 22:30:56 -07:00
Listeners Version 3 - hold onto your butts 2016-03-25 01:18:05 -07:00
Models Feature: PostgreSQL support (#5642) 2018-07-12 18:24:43 -07:00
Notifications Added last name to expected checkin notification 2018-05-21 17:34:27 -07:00
Observers Fixed #4652 - asset not correctly checking out to user on creation 2018-01-17 12:10:28 -08:00
Policies Fixed asset model permission not granted for edit 2018-03-07 18:22:49 -08:00
Presenters Update my email address across files. (#5716) 2018-06-20 01:59:59 -07:00
Providers Fixed asset model permission not granted for edit 2018-03-07 18:22:49 -08:00