Darko Gjorgjijoski 1adebe85b9 Scope all bulk deletes to current company and fix inverted ownership transfer (#605) ...

Bulk delete: filter IDs through whereCompany() before deleting in all
controllers (Invoices, Payments, Items, Expenses, Estimates, Recurring
Invoices). Previously, any user could delete records from other companies
by providing cross-company IDs.

Transfer ownership: fix inverted hasCompany() check that allowed
transferring company ownership to users who do NOT belong to the company,
while blocking users who DO belong.

Ref #567

2026-04-03 14:16:42 +02:00

..

Auth

Pint

2026-03-21 18:59:53 +01:00

Backup

Merge pull request #508 from alexdev01012020/email-backup

2026-03-27 08:04:02 +01:00

Company

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

Config

Pint

2026-03-21 18:59:53 +01:00

Customer

Fix CustomerPolicy missing hasCompany() check (IDOR) (#604)

2026-04-03 13:56:34 +02:00

CustomField

Pint

2026-03-21 18:59:53 +01:00

Dashboard

Pint

2026-03-21 18:59:53 +01:00

Estimate

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

ExchangeRate

Pint

2026-03-21 18:59:53 +01:00

Expense

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

General

Pint

2026-03-21 18:59:53 +01:00

Invoice

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

Item

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

Mobile

Laravel 11 (#84)

2024-06-05 11:33:52 +02:00

Modules

Pint

2026-03-21 18:59:53 +01:00

Payment

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

RecurringInvoice

Scope all bulk deletes to current company and fix inverted ownership transfer (#605)

2026-04-03 14:16:42 +02:00

Report

Pint

2026-03-21 18:59:53 +01:00

Role

Pint

2026-03-21 18:59:53 +01:00

Settings

Installer reliability improvements (#593)

2026-04-02 14:48:08 +02:00

Update

Pint

2026-03-21 18:59:53 +01:00

Users

Pint

2026-03-21 18:59:53 +01:00