5 Commits

Include renames

Author	SHA1	Message	Date
Isaac ConnorandClaude Opus 5.5	a57634871c	fix: check permissions in Logs delete and the ZonePresets API ... LogsController::delete() never declared global $user, so its System=Edit check always passed and anyone with System view could delete log entries. Logs add, which ZM_LOG_INJECT opens to non-admins, could overwrite an existing entry by Id; pin it. ZonePresetsController had no permission checks. Reading presets stays open to signed-in users; changing them now needs System=Edit. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-29 17:54:25 -04:00
stefan	1bd9def63e	[API] Fix User variable from array to object ... Fix $user variable from array to object to make API work again.	2023-04-23 22:07:24 +02:00
Isaac Connor	34ffd92bf1	Add permissions checking to API/Logs. Fixes unprivileged user being to add/edit/delete/view logs.	2022-10-06 16:22:56 -04:00
Ubuntu	dd9603f70f	Merged Angular UI branch API to master	2015-06-11 02:58:58 +00:00
Kyle Johnson	35530c627a	Initial commit of Logs MVC	2014-11-15 19:03:40 +00:00