Skip to content

Conversation

@defrance
Copy link
Contributor

list of defined holiday and list of public holiday

Copy link
Contributor Author

@defrance defrance left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

del white spaces

@eldy
Copy link
Member

eldy commented Nov 24, 2025

Whe should have (like we should for all endpoints for holiday) one test on permission

For example, i the same api file for diction of proposal, we have

if (!DolibarrApiAccess::$user->hasRight('propal', 'lire') && !DolibarrApiAccess::$user->hasRight('commande', 'lire') && !DolibarrApiAccess::$user->hasRight('facture', 'lire')) {
			throw new RestException(403);
}

@eldy eldy added the PR to fix - See feedback in comments PR needs to be fixed to be integrated (some comments should describes the fix to do) label Nov 24, 2025
Added permission checks for user access rights before fetching data for expense reports, holidays, and HR public holidays.
Copy link
Contributor Author

@defrance defrance left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

added on expensereport dictionary api too

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

PR to fix - See feedback in comments PR needs to be fixed to be integrated (some comments should describes the fix to do)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants