Darko Gjorgjijoski 734ac9421d fix(users): scope user view & update to the acting company ...

User view/update authorized only that the requester owns their active company, not that the target user belonged to it, allowing an owner of one company to read or modify users of another. Require shared company membership in UserPolicy.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-14 23:43:18 +02:00

..

Feature

fix(users): scope user view & update to the acting company

2026-06-14 23:43:18 +02:00

Unit

fix(security): recompute document totals server-side (GHSA-8c69) (#665)

2026-06-12 09:30:44 +02:00

Helpers.php

build version 400

2020-12-02 17:54:08 +05:30

Pest.php

Implement PHP CS Fixer and a coding standard to follow (#471)

2021-05-21 17:27:51 +05:30

TestCase.php

Laravel 11 (#84)

2024-06-05 11:33:52 +02:00