mirror/opensourcepos
1
0 Fork 0
mirror of https://github.com/opensourcepos/opensourcepos.git synced 2026-11-08 23:43:32 -05:00
Code Issues Packages Projects Releases Wiki Activity
6,914 Commits 46 Branches 40 Tags
1a0d017fc4dbf12929672b2e9437bfcbb8a21810
Commit Graph
2 Commits
Author SHA1 Message Date
jekkos 1a0d017fc4 fix: address CodeRabbit review — null destination, settings refresh, session service 2026-11-08 19:37:04 +01:00
jekkos a7be56e175 fix: validate stock_destination in Receivings postChangeMode 
postChangeMode() authorized stock_source but silently accepted any
client-supplied stock_destination, allowing an employee to set a
requisition/transfer destination they have no receivings grant for.

- Require is_allowed_location() for both source AND destination
- Add ReceivingsControllerTest with reject/accept regression tests
 2026-11-08 19:37:04 +01:00