Thanakorn
8705be0d1b
Enforce roles on admin endpoints and return real status codes
...
- users, SMTP and batch-lock endpoints are owner/admin only
- engines answer 400/403/404/409/500 instead of 200 with an error body;
database errors no longer leak to the client
2026-09-24 14:53:40 +07:00
Thanakorn
e579dd596c
Start every session through session.php; idle timeout, app access and auth status codes
2026-09-24 14:30:35 +07:00
Thanakorn S
2a6441c6a9
Complete Rack→Bin rename and fix ReportManager property bug
2026-05-28 09:53:19 +07:00
Thanakorn S
987cf7ded9
Change 'Rack' to 'Bin'
2026-05-27 17:14:53 +07:00
Thanakorn S
5ca6b49fd0
code audit fixes: require_once, issue flow, role guards
2026-05-23 17:06:08 +07:00
Thanakorn S
6eeebfeacb
1) user invitation 2) app access control 3) txn quota guard
2026-05-21 11:42:47 +07:00
Thanakorn S
ac4fd9a5ad
implement JS password scoring, td_stock approve logicc
2026-04-30 15:14:42 +07:00
Thanakorn S
db5c47b6ca
Reports
2026-04-29 17:04:11 +07:00
Thanakorn