Release 1.6.2 (#1289)

* include user teams in user entity
* prevent unauthorized access via API
* improve teamlead permission handling in team timesheets
* add team data to user entity
* add security tests
* highlight menu for invoice template copy
* unified handling of invoice data across all templates
* access to the current users data in invoice templates
* permission improvement in invoice form
* allow to skip record rows
* allow to add new invoice locations without overwriting the global ones
* allow to order user preferences
* change permission for normal users with access to view_other_timesheets
* properly validate invoice template field length
* allow to replace multiple variables in cell values text
* upgraded office invoice template
* doctrine deprecation fix
* upgrade phpoffice/phpword
* fix future begin check for default rounding rules
* dashboard widget counter: respect visibility and teams - fixes #1161
* fix future begin check for default rounding rules
* added new events for pre and post invoice rendering
* fix permission issue for users without team seeing all records
* prevent error in spreadsheet renderer for empty invoices

src/Entity/InvoiceTemplate.php

@@ -99,6 +99,7 @@ class InvoiceTemplate
      *
      * @ORM\Column(name="calculator", type="string", length=20, nullable=false)
      * @Assert\NotBlank()
+     * @Assert\Length(max=20)
      */
     private $calculator = 'default';
     /**
@@ -106,6 +107,7 @@ class InvoiceTemplate
      *
      * @ORM\Column(name="number_generator", type="string", length=20, nullable=false)
      * @Assert\NotBlank()
+     * @Assert\Length(max=20)
      */
     private $numberGenerator = 'default';
 
@@ -114,6 +116,7 @@ class InvoiceTemplate
      *
      * @ORM\Column(name="renderer", type="string", length=20, nullable=false)
      * @Assert\NotBlank()
+     * @Assert\Length(max=20)
      */
     private $renderer = 'default';