jtricerolph 97a0b50c92 Require at least one capability to see/access apps that define them ... An app-level grant (user_app_perms/role_app_perms) alone used to be enough to show an app's portal tile and pass AuthGate, even with zero capabilities held. Most apps only gate specific routes/buttons with capabilities, not their dashboard/shell, so a role with the app toggled on but no caps granted (e.g. wages, utilities, hvac, plant, tablet-checkin — none of which auto-grant Staff caps) still saw the full app. Apps with no capabilities defined at all keep prior behaviour.		2026-09-25 09:22:47 +00:00
..
routes	Require at least one capability to see/access apps that define them	2026-09-25 09:22:47 +00:00
db.js	Add reallocate cap description, update assign/admin/settings wording for tasks app	2026-09-17 08:06:34 +00:00
email.js	Add cache-bust endpoint — invalidates workforce + smtp creds on demand	2026-07-08 11:57:42 +00:00
index.js	Add internal registry endpoint, self-registration, and workforce sync	2026-07-01 20:35:44 +00:00
ip-check.js	ip-check: add 'auto' self public-IP mode + matcher list	2026-07-01 12:57:57 +00:00
jwt.js	Initial commit: auth	2026-07-01 12:09:54 +00:00
sync.js	Add SETTINGS_URL/SECRET to compose, fix sync email-change and rate-limit bugs	2026-07-02 00:23:59 +00:00
workforce.js	Workforce: fetch locations individually by ID instead of list endpoint	2026-07-07 13:14:11 +00:00