teamwallet

Go to file

Bastian Wagner ce0b500d7a fix: re-check canBook() inside export dialog methods (defense in depth)

openExportDialog()/openExportSubscriptionDialog() only guarded on teamId
truthiness, relying solely on the template @if for permission gating.
Every other permission-gated method in Cashbox (submitPlayerBooking,
reverseBooking) re-checks the permission internally too. Add the same
guard here, plus a test asserting direct invocation without booking
rights does not call dialog.open.

2026-08-04 08:59:49 +02:00

docs

docs: add implementation plan for cashbox export feature

2026-08-03 20:46:42 +02:00

myteamwallet_backend

fix: add LoggingModule import to CashboxExportModule

2026-08-04 08:10:04 +02:00

myteamwallet_frontend_modern

fix: re-check canBook() inside export dialog methods (defense in depth)

2026-08-04 08:59:49 +02:00

.dockerignore

first commit