jekkos b419902a92 fix: enforce stock-location authorization on Items read endpoints ...

- getSearch(): reject unauthorized stock_location with 403
- getCountDetails(): filter stock_locations to only allowed ones
- form_count_details.php: filter inventory history by allowed locations
- Add regression tests for both read endpoints

2026-11-08 12:34:31 +01:00

..

CashupControllerTest.php

refactor(cashups): extract value object and focused methods in Cashups controller (#4786)

2026-11-02 03:59:07 +04:00

ConfigControllerTest.php

feat(stock-locations): add default location and sort order support (#4643)

2026-10-27 14:36:34 +04:00

CustomersCsvImportTest.php

fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)

2026-10-23 10:10:37 +04:00

EmployeesControllerTest.php

fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)

2026-10-23 10:10:37 +04:00

HomeTest.php

refactor: extract PSR-12 renames and independent bugfixes from plugin system PR (#4784)

2026-10-28 13:00:30 +04:00

ItemKitsControllerTest.php

fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)

2026-10-23 10:10:37 +04:00

ItemsControllerTest.php

fix: enforce stock-location authorization on Items read endpoints

2026-11-08 12:34:31 +01:00

LoginTest.php

chore: strip advisory IDs from code comments and changelog (#4720)

2026-09-30 15:49:18 +02:00

ReportsControllerTest.php

fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)

2026-10-23 10:10:37 +04:00

SalesControllerTest.php

fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)

2026-10-23 10:10:37 +04:00

TaxesControllerTest.php

fix(tests): standardize DB bootstrap/OSPOS mocking, fix stale-prefix bug (#4771)

2026-10-23 10:10:37 +04:00