8 Commits

Include renames

Author	SHA1	Message	Date
Moshe Levi	68a9286ce5	Fix BOLA on transaction-rule endpoints via get_owned_object_or_403 ... Add apps.common.functions.get_owned_object_or_403, an ownership-enforcing variant of get_object_or_404, and apply it across every rules handler that resolved a TransactionRule / (UpdateOrCreate)TransactionRuleAction from a URL id without an owner check. Mirrors the check in transaction_rule_edit (obj.owner and obj.owner != request.user); objects with no owner remain accessible, preserving existing behaviour. Nested ownership (actions owned via their parent rule) is handled with owner_path='rule.owner'.	2026-08-31 20:14:40 +03:00
Herculino Trotta	c738f5ee29	changes	2025-09-02 09:47:27 -03:00
Herculino Trotta	65c61f76ff	feat(locale): add space-dot and space-comma number formatting options, where the thousand separator is a space	2025-08-10 12:34:29 -03:00
Herculino Trotta	66a5e6d613	fix(locale): get_format doesn't override number formatting if use_l10n is None	2025-08-10 12:23:41 -03:00
Herculino Trotta	b27633a28e	fix: broken distribution chart when number format is set to dot-comma	2025-06-29 01:31:43 -03:00
Herculino Trotta	3796112d77	feat: monkey patch get_format to return usersettings	2025-01-27 13:22:21 -03:00
Herculino Trotta	f0ead20b57	feat: add common function for returning remaining days in a month	2024-09-26 21:29:55 -03:00
Herculino Trotta	50b0c6ce01	initial commit	2024-09-26 11:00:40 -03:00