Incorrect Billing Input Allowed on Django Admin Page

[edwintorres]

Description

In the regular Tock UI, billable projects are correctly restricted to submitting timecards based on their designated billing type (hours for hourly projects, percentage for weekly projects). However, on the Django Admin Page, users can modify timecards for all projects and are able to enter either hours or percentage, regardless of the project’s designated billing type.

Impact

There have been instances where users have mistakenly requested hourly updates for projects billed on a weekly basis. BizOps POCs making these changes in admin mode were able to submit these requests due to both options (percentage and hours) being available, leading to incorrect billing submissions.

Steps to Reproduce

• Navigate to the Django Admin Page.
• Modify a timecard for a project that is billed on a weekly basis.
• Observe that both the hours and percentage fields are editable, allowing submission of incorrect billing data.