nicandClaude Opus 5.5 72922bb459 fix(api): soft delete monitors like the console does (#5176) ...

DELETE /monitors/:id hard-deleted the Monitors row through CakePHP.
Zones went with it, but the monitor's Events, Monitor_Status and
Event_Summaries rows were left pointing at a monitor that no longer
exists. The console deletes with ZM\Monitor::delete(): it stops zmc
and zmcontrol and marks the monitor Deleted, keeping its events
("Events will age out") and letting the monitor be undeleted.
Use the same call in the API.

refs #5175

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-04 08:50:19 -04:00

..

Component

fix(api): answer 400 naming the field instead of 500 on an unknown filter

2026-08-28 19:54:07 -04:00

AppController.php

fix: random per-user salts in zmupdate.pl password migration, rehash migrated passwords on every login (#5167)

2026-10-02 08:30:43 -04:00

CameraModelsController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ConfigsController.php

fix: require System permission to read the Config API and withhold secrets

2026-08-15 22:18:47 -04:00

ControlsController.php

fix: gate the control definitions and host load API on System permission

2026-08-15 22:18:47 -04:00

EncoderTemplatesController.php

feat: encoder parameter templates with editor + REST API closes #4778 closes #4802

2026-05-06 17:24:17 -04:00

EventDataController.php

fix: apply the per-monitor ACL throughout the Events API

2026-09-29 17:54:25 -04:00

EventsController.php

fix: apply the per-monitor ACL throughout the Events API

2026-09-29 17:54:25 -04:00

FramesController.php

feat: key Frames by (EventId, FrameId) and drop the surrogate Id refs #5164

2026-10-01 11:48:26 -04:00

GroupsController.php

fix: require edit on each monitor a group change moves

2026-09-29 17:54:25 -04:00

HostController.php

fix: replace and refuse the shipped ZM_AUTH_HASH_SECRET refs GHSA-wmcc-x64g-jr84 GHSA-p2c6-jw8f-ffjc

2026-09-28 19:47:22 -04:00

LogsController.php

fix: check permissions in Logs delete and the ZonePresets API

2026-09-29 17:54:25 -04:00

ManufacturersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

MonitorsController.php

fix(api): soft delete monitors like the console does (#5176)

2026-10-04 08:50:19 -04:00

NotificationsController.php

fix: address Copilot review feedback on Notifications API refs #4684

2026-03-05 20:39:54 -05:00

PagesController.php

further merges from cakephp 2.10.8

2018-03-21 13:09:55 -04:00

RolesController.php

feat: add User Roles feature for reusable permission templates

2026-01-29 13:34:27 -05:00

ServersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ServerStatsController.php

Add named parameters support to ServerStatsController.

2023-10-26 18:26:51 -04:00

SnapshotsController.php

fix: keep denied monitors' events out of Snapshots and Tags

2026-09-29 17:54:25 -04:00

StatesController.php

fix(api): key States by Id so view, edit and delete work (#5173)

2026-10-03 17:44:00 -04:00

StorageController.php

Add named parameter filtering to Storage controller

2023-05-12 14:10:53 -04:00

TagsController.php

fix: keep denied monitors' events out of Snapshots and Tags

2026-09-29 17:54:25 -04:00

UserPreferenceController.php

fix: make user preferences answer to their owner rather than to System

2026-08-15 22:18:47 -04:00

UsersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ZonePresetsController.php

fix: check permissions in Logs delete and the ZonePresets API

2026-09-29 17:54:25 -04:00

ZonesController.php

fix: stop the API falling back to generic Crud actions, restrict zone reads

2026-09-29 17:54:25 -04:00