Isaac Connor c40dfeaa1d Merge pull request #5351 from connortechnology/5348-alarm-cause-nits ...

fix: preserve a UTF-8 alarm cause and accept a literal "0" refs #5348

2026-10-31 19:57:58 -04:00

..

Component

fix(api): answer 400 naming the field instead of 500 on an unknown filter

2026-08-28 19:54:07 -04:00

AppController.php

fix: snapshot and tag edits keep the event links the editor can't view

2026-10-31 18:45:52 -04:00

CameraModelsController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ConfigsController.php

fix: stop the Config API leaking secret values refs GHSA-8g63-hqg8-82cv

2026-10-28 19:20:54 -04:00

ControlsController.php

fix: let users who can control a monitor read the Controls API

2026-10-16 21:07:45 -04:00

EncoderTemplatesController.php

feat: encoder parameter templates with editor + REST API closes #4778 closes #4802

2026-05-06 17:24:17 -04:00

EventDataController.php

fix(api): count the user's role in the Events permission checks

2026-10-21 19:06:25 -05:00

EventsController.php

fix(api): refuse events/view for an event on a monitor the user may not view

2026-10-31 19:08:08 -04:00

FramesController.php

fix(api): count the user's role in the Events permission checks

2026-10-21 19:06:25 -05:00

GroupsController.php

fix: check the group and event links an API save will write

2026-10-31 18:45:52 -04:00

HostController.php

fix: refuse host/login with both a password and a token

2026-10-31 10:46:05 -04:00

LogsController.php

fix: check permissions in Logs delete and the ZonePresets API

2026-09-29 17:54:25 -04:00

ManufacturersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

MonitorsController.php

Merge pull request #5351 from connortechnology/5348-alarm-cause-nits

2026-10-31 19:57:58 -04:00

NotificationsController.php

fix: address Copilot review feedback on Notifications API refs #4684

2026-03-05 20:39:54 -05:00

PagesController.php

further merges from cakephp 2.10.8

2018-03-21 13:09:55 -04:00

RolesController.php

feat: add User Roles feature for reusable permission templates

2026-01-29 13:34:27 -05:00

ServersController.php

[API] Fix User variable from array to object

2023-04-23 22:07:24 +02:00

ServerStatsController.php

Add named parameters support to ServerStatsController.

2023-10-26 18:26:51 -04:00

SnapshotsController.php

fix: snapshot and tag edits keep the event links the editor can't view

2026-10-31 18:45:52 -04:00

StatesController.php

fix: make StatesController::packageControl protected so it can't be called directly

2026-10-23 22:29:38 -04:00

StorageController.php

Add named parameter filtering to Storage controller

2023-05-12 14:10:53 -04:00

TagsController.php

Merge pull request #5399 from connortechnology/fix/ghsa-6h3c-api-associated-ids

2026-10-31 19:05:16 -04:00

UserPreferenceController.php

fix: make user preferences answer to their owner rather than to System

2026-08-15 22:18:47 -04:00

UsersController.php

fix: honour ZM_USER_SELF_EDIT in the users API

2026-10-12 11:28:40 -05:00

ZonePresetsController.php

fix: check permissions in Logs delete and the ZonePresets API

2026-09-29 17:54:25 -04:00

ZonesController.php

fix: stop the API falling back to generic Crud actions, restrict zone reads

2026-09-29 17:54:25 -04:00