Dries Peeters 568933c3b9 fix(auth): scope client portal users to their assigned client ...

Client-portal-enabled users (main app login, typically viewer) were not
included in get_allowed_client_ids(), so ProjectService and other callers
saw scope_client_ids=None and listed every project.

- Return [client_id] for is_client_portal_user in User.get_allowed_client_ids
- Derive get_allowed_project_ids from allowed client IDs for all non-admins
- Apply client/project scope and access checks from allowed IDs, not only
  subcontractor is_scope_restricted (fixes user_can_access_* for portal)

Fixes DRYTRIX/TimeTracker#592.

Tests: extend test_scope_filter with client_portal_scoped_user and API
isolation for GET /api/v1/projects.

2026-04-24 16:15:24 +02:00

..

__init__.py

feat: smart in-app notifications, value dashboard stats, and search scope helpers

2026-04-15 12:15:23 +02:00

activity.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

api_idempotency_key.py

feat(db): add task custom_fields and api_idempotency_keys

2026-04-05 08:39:11 +02:00

api_token.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

audit_log.py

feat(models): add ClientPortalDashboardPreference and update user/audit/link models

2026-03-16 15:15:21 +01:00

budget_alert.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

calendar_event.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

calendar_integration.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client_attachment.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client_note.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client_notification.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client_portal_customization.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client_portal_dashboard_preference.py

feat(models): add ClientPortalDashboardPreference and update user/audit/link models

2026-03-16 15:15:21 +01:00

client_prepaid_consumption.py

…

client_time_approval.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

client.py

fix(api): align client search, OpenAPI version, and Client construction

2026-04-15 12:57:01 +02:00

comment_attachment.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

comment.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

contact_communication.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

contact.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

currency.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

custom_field_definition.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

custom_report.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

deal_activity.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

deal.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

donation_interaction.py

feat(web): high-visibility support modal, prompts, and supporter UX

2026-04-15 10:55:37 +02:00

expense_category.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

expense_gps.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

expense.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

extra_good.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

focus_session.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

gamification.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

import_export.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

integration_external_event_link.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

integration.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice_approval.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice_email.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice_image.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice_pdf_template.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice_peppol.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice_template.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

invoice.py

feat(invoices): add fully configurable invoice number patterns

2026-03-26 14:51:55 +01:00

issue.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

kanban_column.py

…

lead_activity.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

lead.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

link_template.py

feat(models): add ClientPortalDashboardPreference and update user/audit/link models

2026-03-16 15:15:21 +01:00

mileage.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

payment_gateway.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

payments.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

per_diem.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

permission.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

project_attachment.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

project_cost.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

project_stock_allocation.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

project_template.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

project.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

purchase_order.py

fix(inventory): stop 500 on purchase order detail view (#576)

2026-03-27 06:38:47 +01:00

push_subscription.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

quote_attachment.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

quote_image.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

quote_template.py

fix: quote create 500, line order, and Factur-X PDF parity

2026-04-12 13:34:58 +02:00

quote_version.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

quote.py

feat(quotes): invoice-style line items, costs, and extra goods (#585)

2026-04-12 14:00:12 +02:00

rate_override.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

recurring_block.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

recurring_invoice.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

recurring_task.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

reporting.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

salesman_email_mapping.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

saved_filter.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

settings.py

feat(integrations): Linear connector and shared HTTP/sync helpers

2026-04-05 08:39:18 +02:00

stock_item.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

stock_lot.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

stock_movement.py

fix(inventory): harden purchase-order creation and stock idempotency

2026-03-26 14:52:06 +01:00

stock_reservation.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

supplier_stock_item.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

supplier.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

task_activity.py

…

task.py

feat(db): add task custom_fields and api_idempotency_keys

2026-04-05 08:39:11 +02:00

tax_rule.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

team_chat.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_entry_approval.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_entry_template.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_entry.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

time_off.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

timesheet_period.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

timesheet_policy.py

feat(workforce): add timesheet governance, time-off, and workforce dashboard

2026-03-06 15:44:35 +01:00

user_client.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

user_favorite_project.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

user_smart_notification_dismissal.py

feat: smart in-app notifications, value dashboard stats, and search scope helpers

2026-04-15 12:15:23 +02:00

user.py

fix(auth): scope client portal users to their assigned client

2026-04-24 16:15:24 +02:00

warehouse_stock.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

warehouse.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

webhook.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

weekly_time_goal.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00

workflow.py

fix: CI tests, code quality, and duplicate DB indexes

2026-03-15 10:51:52 +01:00