Syazwan b4b7041b8e Harden timesheet authz and close audit/security gaps. ...

Block weekly-hours IDOR and unauthorized rejects, enforce project membership, stop broadcast reset-token spam, and tighten related hardening plus tests.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-07-10 17:51:38 +08:00

..

factories

Add Program Manager rename, Project Admin, project types, and overtime support.

2026-07-02 10:53:41 +08:00

migrations

Harden timesheet authz and close audit/security gaps.

2026-07-10 17:51:38 +08:00

seeders

Seed Welcome broadcast template and compact broadcast modal

2026-07-03 20:53:48 +08:00

.gitignore

Initial commit: Quatriz timesheet application.

2026-06-28 22:22:52 +08:00