Tobias Regnery fdcc17ca2c Fix user creation with FullMultipleCompanySupport enabled over API ... It is currently possible as a non-superuser to create a new user or patch an existing user with arbitrary company over the API if FullMultipleCompanySupport is enabled. Altough a highly unlikely scenario as the user needs permission to create API keys and new users, it is a bug that should get fixed. Add a call to getIdForCurrentUser() to normalize the company_id if FullMultipleCompanySupport is enabled.		2024-10-16 11:47:18 +02:00
..
AccessoriesController.php	Merge branch 'develop' into testing/fmcs-accessories	2024-09-30 12:59:27 -07:00
AssetFilesController.php	More type-hinting	2024-07-05 07:07:20 +01:00
AssetMaintenancesController.php	Merge remote-tracking branch 'origin/develop' into features/add_created_at_created_by	2024-09-20 13:43:50 +01:00
AssetModelFilesController.php	Fix some typos in models file handler.	2024-08-21 22:24:08 +02:00
AssetModelsController.php	Eager load adminuser	2024-09-20 14:33:26 +01:00
AssetsController.php	Refactor asset creation with API	2024-10-14 15:14:41 +02:00
CategoriesController.php	Eager load adminuser	2024-09-19 19:56:39 +01:00
CompaniesController.php	Refactor isDeletable on companies	2024-09-19 20:38:34 +01:00
ComponentsController.php	Added created_by to components	2024-09-19 17:01:36 +01:00
ConsumablesController.php	Small fix for notifications checkout	2024-09-20 19:11:52 +01:00
CustomFieldsController.php	More type-hinting	2024-07-05 07:07:20 +01:00
CustomFieldsetsController.php	More type-hinting	2024-07-05 07:07:20 +01:00
DepartmentsController.php	Change user_id to created_by	2024-09-17 22:16:41 +01:00
DepreciationsController.php	Removed duplicate line	2024-09-19 18:26:08 +01:00
GroupsController.php	Additional consistencies	2024-09-19 17:20:56 +01:00
ImportController.php	More type-hinting	2024-07-05 07:07:20 +01:00
LabelsController.php	More type-hinting	2024-07-05 07:07:20 +01:00
LicensesController.php	Added created_by	2024-09-19 17:01:48 +01:00
LicenseSeatsController.php	Change user_id to created_by	2024-09-17 22:16:41 +01:00
LocationsController.php	Include accessories count	2024-08-07 20:19:47 +01:00
ManufacturersController.php	Added created_by for manufacturers	2024-09-19 18:04:50 +01:00
PredefinedKitsController.php	Eager load adminuser	2024-09-19 19:41:46 +01:00
ProfileController.php	Fixed API key missing translations	2024-07-09 13:17:46 +01:00
ReportsController.php	Changed action_date to created_at	2024-09-25 17:25:15 +01:00
SettingsController.php	More type-hinting	2024-07-05 07:07:20 +01:00
StatuslabelsController.php	Added created_by to status label	2024-09-19 18:22:11 +01:00
SuppliersController.php	More type-hinting	2024-07-05 07:07:20 +01:00
UsersController.php	Fix user creation with FullMultipleCompanySupport enabled over API	2024-10-16 11:47:18 +02:00