DanielS 7119383139 fix(security): harden licserver config access controls ...

- Add auth guard to getLicServerConfig() - unauthenticated callers
  now receive null config instead of DB values
- Remove non-existent 'superadmin' role from saveLicServerConfig()
  check (only 'admin' exists per project schema)
- New migration: restrict settings table WRITE to admins only
  (previously any authenticated user could overwrite licserver_api_key)

2026-07-14 17:35:12 +02:00

..

20260617_end_customers.sql

feat(crm): end_customers table, RLS, wizard customer selector, /my-customers CRUD, GDPR anonymization

2026-06-17 01:57:17 +02:00

20240501000000_initial_schema.sql

feat: implement logic engine for module dependencies and exclusions

2026-05-01 00:52:34 +02:00

20260430222242_create_invoice_bucket.sql

feat: add automated PDF invoice generation and storage in Supabase

2026-05-01 00:52:37 +02:00

20260430223125_add_categories_table.sql

fix: remove default seeded categories from migrations

2026-06-23 03:22:30 +02:00

20260430230140_admin_crud_policies.sql

fix: add RLS policies for admin CRUD operations on products and categories

2026-05-01 01:01:53 +02:00

20260430230348_add_profiles_table.sql

feat: add profiles table and RLS policies for user customer data

2026-05-01 01:04:02 +02:00

20260430231643_add_missing_columns_to_products.sql

fix: add missing is_active and is_required columns to database schema

2026-05-01 01:16:57 +02:00

20260501001900_add_sort_order_to_categories.sql

feat: add sort_order to categories for controlling display order in the order wizard

2026-05-01 02:21:39 +02:00

20260501002700_add_is_required_to_categories.sql

feat: add optional categories - admins can mark categories as optional in the order wizard

2026-05-01 02:29:00 +02:00

20260501003000_add_billing_interval_to_products.sql

feat: add billing_interval to products supporting one-time, monthly and yearly subscription pricing

2026-05-01 02:33:51 +02:00

20260501003400_remove_yearly_billing_interval.sql

refactor: remove yearly billing interval, keep only one_time and monthly

2026-05-01 02:35:22 +02:00

20260623000000_add_profiles_trigger_and_backfill.sql

fix: resolve customer creation fk violation and implement instant updates in admin dialogs

2026-06-23 03:27:46 +02:00

20260623000100_add_order_number_and_hash_to_orders.sql

feat: rename invoice (RE-) to order confirmation (BE-) throughout the application

2026-06-25 22:43:17 +02:00

20260623000200_create_users_and_settings_tables.sql

feat(setup): remove default admin info@hephex.de automation

2026-07-03 09:59:07 +02:00

20260623000300_create_customers_table.sql

migration: create public.customers table with RLS

2026-06-23 23:52:57 +02:00

20260624000000_integrity_functions.sql

feat: link end customers directly to companies

2026-07-04 15:17:04 +02:00

20260624100000_create_companies_table.sql

Add Partner/Firmen links, migration for companies and partner relationship

2026-06-24 22:51:02 +02:00

20260625000000_add_delivery_address_to_companies.sql

feat: add delivery address migration, update companies server actions and rewrite companies page to support creation and edit of full address

2026-06-25 01:52:05 +02:00

20260625001000_add_email_to_end_customers.sql

feat: Add email field to end_customers table and UI screens

2026-06-25 02:29:33 +02:00

20260625085800_add_show_in_branches_to_products.sql

feat: restructure checkout steps, add Kauf/Abo selection and product display flags

2026-06-25 09:03:53 +02:00

20260625130000_add_has_quantity_to_product_modules.sql

feat: Add quantity support for product modules, multiply prices in order snapshot and pdf

2026-06-25 13:04:37 +02:00

20260625143000_add_dependencies_to_products.sql

feat: Add product dependencies (requirements and exclusions) to database, admin UI and wizard validation

2026-06-25 14:38:30 +02:00

20260703094300_add_bank_details_to_end_customers.sql

feat(customer): add bank account details support

2026-07-03 09:46:47 +02:00

20260703095900_remove_default_admin_trigger.sql

feat(setup): remove default admin info@hephex.de automation

2026-07-03 09:59:07 +02:00

20260703140500_update_integrity_tables.sql

fix(db-tools): resolve REINDEX transaction error by executing directly via pg client, and dynamically support all database tables in integrity dashboard

2026-07-03 14:01:27 +02:00

20260704152000_update_end_customers_partner_fkey.sql

feat(multiselect): support multi-select categories and free items limits in category config and order wizard

2026-07-07 16:56:24 +02:00

20260704154500_update_orders_rls_company.sql

feat: enable company-wide order viewing and editing

2026-07-04 15:41:48 +02:00

20260704161000_add_company_id_to_orders.sql

feat: assign orders to companies directly and support admin reassignment

2026-07-04 16:08:31 +02:00

20260704174000_secure_storage_and_admin_rls.sql

feat(multiselect): support multi-select categories and free items limits in category config and order wizard

2026-07-07 16:56:24 +02:00

20260706220000_fix_critical_rls_policies.sql

fix(supabase): remove invalid public.partners reference in migration

2026-07-06 22:57:18 +02:00

20260707002000_remove_unused_license_tables.sql

chore(supabase): remove unused pos_modules and licenses tables

2026-07-07 00:23:54 +02:00

20260707170000_add_multiselect_to_categories.sql

feat(multiselect): support multi-select categories and free items limits in category config and order wizard

2026-07-07 16:56:24 +02:00

20260709140800_add_preselect_to_categories.sql

feat(categories): allow disabling preselection

2026-07-09 14:10:25 +02:00

20260709142500_add_show_in_branches_to_categories.sql

feat(categories): add branch visibility selection

2026-07-09 14:26:56 +02:00

20260709153000_add_resets_others_to_categories.sql

feat(category): add resets_others option

2026-07-09 17:27:16 +02:00

20260709220000_consolidated_schema.sql

db: create core schema for products, categories, global rules and orders

2026-07-09 21:49:50 +02:00

20260709231000_secure_user_roles.sql

db: add strict rls policy to protect user roles from self-escalation

2026-07-09 23:06:03 +02:00

20260709231500_fix_users_rls_recursion.sql

db: fix infinite RLS recursion on users table causing admin lockout

2026-07-09 23:15:16 +02:00

20260709233300_add_payment_method_to_orders.sql

fix: add missing payment_method column to orders table

2026-07-09 23:33:13 +02:00

20260709234500_add_type_to_orders.sql

fix: add missing type and payment_method columns to orders table

2026-07-09 23:43:12 +02:00

20260710002000_add_allow_update_discount_to_categories.sql

db: add allow_update_discount column to categories table

2026-07-10 00:18:18 +02:00

20260710003000_move_allow_update_discount_to_products.sql

feat(admin): move allow_update_discount option to product level

2026-07-10 09:15:34 +02:00

20260714000000_add_licserver_config_to_settings.sql

feat(admin): LicServer config manageable via admin settings UI

2026-07-14 17:30:37 +02:00

20260714000100_fix_settings_rls_admin_only_write.sql

fix(security): harden licserver config access controls

2026-07-14 17:35:12 +02:00