skysyaz eba3535ff3 Fix PM own-timesheet access and harden approval transitions.
Include approvers' own rows in timesheet scope, lock submit/approve/reject/revert, abort unauthorized approve, and split set-password throttles so GET refreshes are not locked out.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-10 20:56:58 +08:00
..