Dries Peeters ae9ee9dec1 feat: add subcontractor role with assigned clients (scope-restricted access) ...

- Add user_clients table and UserClient model for many-to-many user-client assignment
- Add 'subcontractor' system role; users with this role see only assigned clients and their projects
- User helpers: is_scope_restricted, get_allowed_client_ids(), get_allowed_project_ids()
- Admin user form: assign clients when role is Subcontractor (multi-select, JS toggle)
- Scope filtering: clients, projects, time entries, reports, invoices, timer, API v1
- Direct access to out-of-scope client/project returns 403 (web and API)
- Migration 127_add_user_clients_table; scope_filter utility and ProjectService scope_client_ids
- Docs: SUBCONTRACTOR_ROLE.md, ADVANCED_PERMISSIONS.md, RBAC, CLIENT_PORTAL, README, CHANGELOG

Addresses GitHub Discussion #476 (user with limited clients/projects).

2026-02-16 07:12:57 +01:00

..

api_auth.py

…

api_responses.py

…

audit.py

Fix lead conversion, activity recording, and deal history

2026-02-09 20:44:23 +01:00

backup.py

…

budget_forecasting.py

…

cache_redis.py

…

cache.py

perf(cache): optimize Redis connection timeouts for faster failures

2026-01-11 10:06:20 +01:00

cli.py

…

client_lock.py

feat(modules): lock client selection and make Clients admin-only

2026-02-02 19:20:48 +01:00

config_manager.py

feat: Add major feature updates - integrations, services, and utilities

2026-01-09 22:42:53 +01:00

context_processors.py

Promote Support & Purchase Key page across app and docs

2026-02-14 22:14:57 +01:00

data_export.py

…

data_import.py

fix(import): CSV/Harvest task created_by + CSRF for time-entries upload

2026-01-28 08:44:32 +01:00

datetime_utils.py

…

db.py

…

decorators.py

…

donate_hide_code.py

feat: allow users to hide donate/support UI via verified code

2026-02-08 11:11:03 +01:00

email.py

fix(email): load mail config inside app_context for gunicorn workers

2026-01-26 14:47:43 +01:00

env_validation.py

…

error_handlers.py

Fix report and time-entries CSV export 500 and error visibility

2026-02-09 21:33:51 +01:00

event_bus.py

…

excel_export.py

feat(reports): add Time Entries report with Excel/CSV export (Discussion #463)

2026-02-13 20:56:07 +01:00

file_upload.py

feat: Add major feature updates - integrations, services, and utilities

2026-01-09 22:42:53 +01:00

i18n_helpers.py

…

i18n.py

…

installation.py

fix: resolve integration test failures (install config dir, settings flush)

2026-01-25 10:09:29 +01:00

logger.py

…

module_helpers.py

Fix BuildError when payment_gateways blueprint is not registered

2026-02-16 06:58:19 +01:00

module_registry.py

feat(roles): add per-role module visibility (hide modules by role)

2026-02-02 19:18:28 +01:00

ocr.py

…

oidc_metadata.py

feat: enhance OIDC metadata fetching with DNS resolution strategies

2026-01-07 20:04:43 +01:00

overtime.py

feat(reports): add Time Entries report with Excel/CSV export (Discussion #463)

2026-02-13 20:56:07 +01:00

pagination.py

…

pdf_generator_fallback.py

fix(invoices): include extra goods and expenses in PDF invoice exports

2026-02-07 22:24:45 +01:00

pdf_generator_reportlab.py

Fix PDF invoice missing items (extra goods and expenses)

2026-02-09 21:27:05 +01:00

pdf_generator.py

fix(invoices): include extra goods and expenses in PDF invoice exports

2026-02-07 22:24:45 +01:00

pdf_template_schema.py

fix(invoices): include extra goods and expenses in PDF invoice exports

2026-02-07 22:24:45 +01:00

performance.py

…

permissions_seed.py

feat: add subcontractor role with assigned clients (scope-restricted access)

2026-02-16 07:12:57 +01:00

permissions.py

…

posthog_features.py

…

posthog_funnels.py

…

posthog_monitoring.py

…

posthog_segmentation.py

…

powerpoint_export.py

…

prepaid_hours.py

…

query_logging.py

fix(query-logging): SQLAlchemy 2 compat and request-scope safety

2026-01-26 14:47:44 +01:00

query_optimization.py

…

rate_limiting.py

…

role_migration.py

feat: add role migration utility for user role system migration

2026-01-07 20:04:48 +01:00

route_helpers.py

…

scheduled_tasks.py

feat: Enhance invoice management, expenses, and PDF generation

2026-01-11 08:37:48 +01:00

scope_filter.py

feat: add subcontractor role with assigned clients (scope-restricted access)

2026-02-16 07:12:57 +01:00

search.py

…

stripe_integration.py

…

telemetry.py

…

template_filters.py

fix: use Settings currency and proper number formats across all modules

2026-02-07 22:00:27 +01:00

time_entries_pdf.py

feat: date/week preferences, time entry notes fix, PDF export wrapping (#497)

2026-02-08 21:01:53 +01:00

time_entry_validation.py

feat: time entry requirements in API and timer; import skips requirements

2026-02-13 20:57:54 +01:00

time_rounding.py

…

timezone.py

Fix lead conversion, activity recording, and deal history

2026-02-09 20:44:23 +01:00

transactions.py

…

validation.py

…

webhook_dispatcher.py

…

webhook_service.py

…