Commit Graph

12829 Commits

Author SHA1 Message Date
Laurent Destailleur
71fd5f2f62 Merge branch 'develop' into new-api-rest-tokens 2025-11-19 21:26:41 +01:00
Florian Mortgat
c0850d9a3f FIX DA027383: permissions not checked on HRM evaluation card (#36328)
Permissions involved:
- hrm->evaluation->readall: the user can view anyone's evaluations
- hrm->evaluation->read: the user can only view their or their subordinates' evaluations
2025-11-19 19:19:55 +01:00
ThomasNgr-OpenDSI
eaa05a482f Allow to view ticket linked files from public interface (#32410) 2025-11-19 15:26:59 +01:00
Yamil Esteban Garcia
6d5835e90f FIX Move 'holiday' from old path array to new one (#36308)
* Remove 'supplier_invoice' from old path array

* Update module path in arrayforoldpath

Sorry Eldy, I was confused. You are absolutely right, it is already corrected.

---------

Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2025-11-19 14:09:05 +01:00
Laurent Destailleur
77e66216dc Fix ci 2025-11-19 12:15:48 +01:00
Laurent Destailleur
5ccab94697 Fix CI 2025-11-19 12:12:07 +01:00
Laurent Destailleur
0a6489a55f Fix CI 2025-11-19 11:59:33 +01:00
Laurent Destailleur
8a8ed7fa67 Fix CI 2025-11-19 11:28:58 +01:00
Laurent Destailleur
75d1f27730 Fix CI 2025-11-19 11:16:24 +01:00
Laurent Destailleur
613a4bab2d Fix CI 2025-11-19 10:57:11 +01:00
Laurent Destailleur
d858764b15 Add config param $dolibarr_main_restrict_eval_methods with whitelist of
functionsallowed in dol_eval. Advisory GHSA-x3w7-24rq-gvc5
2025-11-19 03:44:24 +01:00
Laurent Destailleur
9818c76f7f MAIN_DISALLOW_STRING_OBFUSCATION_IN_DOL_EVAL replaced with
MAIN_ALLOW_OBFUSCATION_METHODS_IN_DOL_EVAL
2025-11-18 23:34:23 +01:00
Laurent Destailleur
947389b072 NEW Disable by default obfuscation methods and function in extrafields
evaluable strings. Can re-enable with
MAIN_ALLOW_OBFUSCATION_METHODS_IN_DOL_EVAL=1
2025-11-18 22:45:56 +01:00
Laurent Destailleur
bcde1eb545 NEW Add filter on agenda event progression on agenda page 2025-11-18 21:59:47 +01:00
Laurent Destailleur
b748ffd528 Secure the dol_eval 2025-11-18 18:57:17 +01:00
Laurent Destailleur
78384eca54 Clean code 2025-11-18 17:14:42 +01:00
Laurent Destailleur
ac2fe3e991 Comment 2025-11-18 16:59:24 +01:00
Laurent Destailleur
5aaf9cd565 NEW Add hook on calcula_price() and get_default_tva() 2025-11-18 16:57:50 +01:00
Laurent Destailleur
81527a9fe9 Clean code 2025-11-18 12:03:23 +01:00
Frédéric FRANCE
8d459e469d clean code (#36260)
* clean code

* clean code

* clean code

* clean code

* fix $val might not be defined

* fix phpstan errors reported

* fix phpstan errors reported

* fix phpstan errors reported

* fix phpstan errors reported

* fix phpstan errors reported

* fix phpstan errors reported

* ignore phpstan reported for later

* clean code

* clean code

* clean code

* clean

* test
2025-11-18 11:41:28 +01:00
MDW
785753bbee Qual: Change field name to let phan warn about argument order (#36261)
* FIX wrong $param parameter position

* FIX ok it's good ! ;-)

* Qual: Change field name to let phan warn about argument order

# Qual: Change field name to let phan warn about argument order

Most of the time print_liste_field_titre() is called with $param instead of $moreparam.
By changing the argument name, phan will warn if the position is likely incorrect.

* Fix: Fix parameter order in print_liste_field_titre calls

- Fixed parameter order in print_liste_field_titre calls to maintain consistency

---------

Co-authored-by: Regis Houssin <regis.houssin@inodbox.com>
Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2025-11-18 11:40:32 +01:00
Florian Mortgat
8e30fc0bd1 FIX 19.0 - attachments upload dir for invoices not always determined correctly (doesn't always take multi-entity into account) (#36302) 2025-11-18 11:39:45 +01:00
Laurent Destailleur
f05f5af59e Merge branch 'develop' of git@github.com:Dolibarr/dolibarr.git into develop 2025-11-18 11:38:31 +01:00
Laurent Destailleur
61a849090b Close #36298 2025-11-18 11:36:45 +01:00
MDW
f5d6533c5b Qual: (v22)Change field name to let phan warn about argument order (#36263)
* FIX wrong $param parameter position

* FIX ok it's good ! ;-)

* Qual: Change field name to let phan warn about argument order

# Qual: Change field name to let phan warn about argument order

Most of the time print_liste_field_titre() is called with $param instead of $moreparam.
By changing the argument name, phan will warn if the position is likely incorrect when '$param' is used - it will not warn for cases where $option or another
name is used.

---------

Co-authored-by: Regis Houssin <regis.houssin@inodbox.com>
2025-11-17 21:49:31 +01:00
Laurent Destailleur
1abc87ff03 Clean code 2025-11-17 19:35:10 +01:00
Laurent Destailleur
10921598cb Simple way to trap error to Close #36292 2025-11-17 19:10:58 +01:00
Laurent Destailleur
0631cd61e0 Merge branch 'develop' of github.com:Dolibarr/dolibarr into develop 2025-11-17 17:21:52 +01:00
Laurent Destailleur
72afda872d WIP LNE 2025-11-17 13:53:53 +01:00
Laurent Destailleur
ed08d6389a Merge branch 'develop' of git@github.com:Dolibarr/dolibarr.git into develop 2025-11-17 10:44:03 +01:00
Laurent Destailleur
1dd28e352a NEW Introduce getCurrency(). $conf is no more allowed into computed
formulae.
2025-11-17 10:29:55 +01:00
Laurent Destailleur
bb53a368fc CSS 2025-11-15 23:00:02 +01:00
atm-lucas
bdd8dc0046 NEW - Add a new API "product lots" (#36243)
* Add new API product lots

* fix precommit
2025-11-14 16:06:59 +01:00
Laurent Destailleur
5356cd9b93 Merge branch 'develop' of git@github.com:Dolibarr/dolibarr.git into develop 2025-11-12 16:02:15 +01:00
Laurent Destailleur
71d129c70a Debug v23 2025-11-12 16:02:03 +01:00
Frédéric FRANCE
2ba87e0d32 add phone mobile of target (#36234) 2025-11-12 15:33:56 +01:00
Laurent Destailleur
392fb33587 Tipo 2025-11-12 15:29:42 +01:00
Laurent Destailleur
ad91cdbe48 Merge branch 'develop' of git@github.com:Dolibarr/dolibarr.git into develop 2025-11-12 15:04:02 +01:00
Laurent Destailleur
9e7fedfec5 Debug v23 2025-11-12 15:03:31 +01:00
Frédéric FRANCE
06c4c9e8b7 check access doc for massfilesarea_stock (#36229) 2025-11-12 10:03:14 +01:00
Frédéric FRANCE
d07e8c03a0 avoid changing object after call (#36159)
* avoid changing object after call

* avoid changing object after call

* avoid changing object after call

* avoid changing object after call

* avoid changing object after call

* avoid changing object after call

* avoid changing object after call

* clean code

* clean code

* clean code

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* fix

* clean code

* clean

* clean

---------

Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2025-11-12 09:44:39 +01:00
Laurent Destailleur
554354b151 Fi CI 2025-11-11 19:31:18 +01:00
Laurent Destailleur
d8656d523b Debug v23 2025-11-11 15:12:31 +01:00
Laurent Destailleur
2db13a49b9 Merge branch 'develop' of git@github.com:Dolibarr/dolibarr.git into develop 2025-11-11 15:07:09 +01:00
Laurent Destailleur
9914e6280b WIP LNE 2025-11-11 15:06:57 +01:00
Regis Houssin
a00ff66f45 FIX member photo and thirdparty logo not deleted in documents directory (#36197)
* FIX member photo with web portal don't need login

* FIX member photo not deleted

* FIX pre-commit

* FIX phan error and uniformize code

* FIX pfffffff pre-commit

* FIX uniformize code

* FIX remove TODO

* FIX change const name

* FIX missing add in ECM during creation

* FIX add user photo in ecm

* FIX phan error
2025-11-11 08:56:33 +01:00
Laurent Destailleur
2df6fa0237 Add test on data decryption 2025-11-11 01:32:17 +01:00
Laurent Destailleur
70f2836dbc Debug v23 2025-11-09 21:57:45 +01:00
Laurent Destailleur
c42d783abe Fix regression 2025-11-09 14:53:09 +01:00
Laurent Destailleur
34145b8e45 Clean code 2025-11-09 12:43:04 +01:00