Juan José Mata
69827dada8
Fix transaction search account scope bypass ( #1460 )
...
Ensure accessible_account_ids filtering is applied whenever account scope is provided, including empty arrays, so users with no shared accounts cannot see family-wide transactions.
Also make totals robust when scoped queries return no rows and add regression tests for both visibility and totals behavior with empty accessible account lists.
2026-04-13 21:23:59 +02:00
..
2026-04-10 23:19:48 +02:00
2026-04-09 18:33:59 +02:00
2026-04-12 18:09:03 +02:00
2026-03-25 17:47:04 +01:00
2026-04-08 22:23:15 +02:00
2026-04-07 14:43:17 +02:00
2026-04-11 21:37:07 +02:00
2026-04-01 20:25:06 +02:00
2026-04-11 21:37:07 +02:00
2026-04-05 09:27:24 +02:00
2026-03-11 15:54:01 +01:00
2026-04-10 23:19:48 +02:00
2026-04-10 23:19:48 +02:00
2026-04-11 21:32:20 +02:00
2026-02-06 18:04:03 +01:00
2026-04-13 00:51:23 +02:00
2026-04-07 14:43:17 +02:00
2026-04-08 21:05:58 +02:00
2026-03-14 20:22:39 +01:00
2026-04-10 23:19:48 +02:00
2026-02-08 18:19:37 +01:00
2026-02-08 18:19:37 +01:00
2026-02-19 18:58:01 +01:00
2026-03-25 17:47:04 +01:00
2026-03-13 08:11:51 +01:00
2026-04-13 00:51:23 +02:00
2026-03-23 12:34:43 +01:00
2026-03-26 19:01:35 +01:00
2026-03-25 17:47:04 +01:00
2026-04-10 15:43:22 +02:00
2026-03-23 19:39:32 +01:00
2026-03-25 17:47:04 +01:00
2026-04-09 18:33:59 +02:00
2026-04-13 21:23:59 +02:00
2026-04-08 21:05:58 +02:00
2026-03-20 17:01:31 +01:00
2026-03-25 10:50:23 +01:00
2026-04-07 15:53:25 +02:00
2026-02-06 21:25:52 +01:00
2026-03-14 20:14:18 +01:00
2026-03-03 15:47:51 +01:00
2026-03-25 10:50:23 +01:00
2026-04-07 14:43:17 +02:00
2026-04-07 14:43:17 +02:00
2026-04-13 20:03:55 +02:00
2026-04-08 08:35:47 +02:00
2026-03-11 15:54:01 +01:00
2026-04-01 20:27:29 +02:00
2026-03-16 20:22:11 +01:00
2026-03-19 15:17:55 +01:00
2026-04-07 16:28:01 +02:00
2026-04-01 20:25:06 +02:00
2026-04-01 20:25:06 +02:00
2026-03-25 10:50:23 +01:00
2026-02-08 18:19:37 +01:00
2026-04-10 23:19:48 +02:00
2026-04-10 23:19:48 +02:00
2026-02-01 23:48:54 +01:00
2026-04-07 13:17:37 +02:00
2026-03-29 17:30:12 +02:00
2026-04-13 00:51:23 +02:00
2026-02-11 15:22:56 +01:00
2026-04-13 19:53:04 +02:00
2026-02-06 18:30:50 +01:00
2026-04-05 09:27:24 +02:00
2026-03-25 17:47:04 +01:00
2026-03-19 15:17:55 +01:00
2026-02-10 23:42:22 +01:00
2026-03-25 10:50:23 +01:00
2026-04-11 15:09:59 +02:00
2026-03-24 09:28:38 +01:00
2026-03-25 10:50:23 +01:00
2026-04-07 11:39:18 +02:00
2026-03-19 15:17:55 +01:00
2026-02-10 23:42:22 +01:00
2026-04-09 18:33:59 +02:00
2026-03-19 15:17:55 +01:00
2026-02-10 23:42:22 +01:00
2026-02-06 18:04:29 +01:00
2026-02-16 21:11:41 +01:00
2026-04-12 18:09:03 +02:00
2026-03-19 15:17:55 +01:00
2026-02-10 23:42:22 +01:00
2026-03-23 12:34:43 +01:00
2026-04-05 09:27:24 +02:00
2026-03-26 19:01:35 +01:00
2026-04-03 12:38:37 +02:00
2026-04-07 11:24:50 +02:00
2026-04-10 17:42:16 +02:00
2026-04-10 17:42:16 +02:00
2026-02-10 23:42:22 +01:00
2026-03-20 14:52:09 +01:00
2026-02-10 23:42:22 +01:00
2026-02-06 18:04:03 +01:00
2026-02-10 23:14:58 +01:00
2026-03-23 14:27:41 +01:00
2026-02-23 17:43:00 -05:00
2026-03-29 10:08:54 +02:00
2026-04-10 23:19:48 +02:00
2026-03-31 17:22:49 +02:00
2026-02-11 15:22:56 +01:00