snipe-it/app/Http/Controllers/Api
Tobias Regnery fb4fe30049 Fix asset creation with API and FullMultipleCompanySupport
It is currently possible to create an asset with arbitrary company without being superuser and FullMultipleCompanySupport enabled.
This bug goes back to 75ac7f80b9 which is part of version 6.3.0.
Fix this by restoring the previous behaviour to check the company_id with getIdForCurrentUser().
2024-10-11 12:19:20 +02:00
..
AccessoriesController.php Added order by created_by to accessories 2024-09-19 16:45:39 +01:00
AssetFilesController.php More type-hinting 2024-07-05 07:07:20 +01:00
AssetMaintenancesController.php Merge remote-tracking branch 'origin/develop' into features/add_created_at_created_by 2024-09-20 13:43:50 +01:00
AssetModelFilesController.php Fix some typos in models file handler. 2024-08-21 22:24:08 +02:00
AssetModelsController.php Eager load adminuser 2024-09-20 14:33:26 +01:00
AssetsController.php Fix asset creation with API and FullMultipleCompanySupport 2024-10-11 12:19:20 +02:00
CategoriesController.php Eager load adminuser 2024-09-19 19:56:39 +01:00
CompaniesController.php Refactor isDeletable on companies 2024-09-19 20:38:34 +01:00
ComponentsController.php Added created_by to components 2024-09-19 17:01:36 +01:00
ConsumablesController.php Small fix for notifications checkout 2024-09-20 19:11:52 +01:00
CustomFieldsController.php More type-hinting 2024-07-05 07:07:20 +01:00
CustomFieldsetsController.php More type-hinting 2024-07-05 07:07:20 +01:00
DepartmentsController.php Change user_id to created_by 2024-09-17 22:16:41 +01:00
DepreciationsController.php Removed duplicate line 2024-09-19 18:26:08 +01:00
GroupsController.php Additional consistencies 2024-09-19 17:20:56 +01:00
ImportController.php More type-hinting 2024-07-05 07:07:20 +01:00
LabelsController.php More type-hinting 2024-07-05 07:07:20 +01:00
LicensesController.php Added created_by 2024-09-19 17:01:48 +01:00
LicenseSeatsController.php Change user_id to created_by 2024-09-17 22:16:41 +01:00
LocationsController.php Include accessories count 2024-08-07 20:19:47 +01:00
ManufacturersController.php Added created_by for manufacturers 2024-09-19 18:04:50 +01:00
PredefinedKitsController.php Eager load adminuser 2024-09-19 19:41:46 +01:00
ProfileController.php Fixed API key missing translations 2024-07-09 13:17:46 +01:00
ReportsController.php Changed action_date to created_at 2024-09-25 17:25:15 +01:00
SettingsController.php More type-hinting 2024-07-05 07:07:20 +01:00
StatuslabelsController.php Added created_by to status label 2024-09-19 18:22:11 +01:00
SuppliersController.php More type-hinting 2024-07-05 07:07:20 +01:00
UsersController.php Change user_id to created_by 2024-09-17 22:16:41 +01:00