Release 1.6.2 (#1289)

* include user teams in user entity
* prevent unauthorized access via API
* improve teamlead permission handling in team timesheets
* add team data to user entity
* add security tests
* highlight menu for invoice template copy
* unified handling of invoice data across all templates
* access to the current users data in invoice templates
* permission improvement in invoice form
* allow to skip record rows
* allow to add new invoice locations without overwriting the global ones
* allow to order user preferences
* change permission for normal users with access to view_other_timesheets
* properly validate invoice template field length
* allow to replace multiple variables in cell values text
* upgraded office invoice template
* doctrine deprecation fix
* upgrade phpoffice/phpword
* fix future begin check for default rounding rules
* dashboard widget counter: respect visibility and teams - fixes #1161
* fix future begin check for default rounding rules
* added new events for pre and post invoice rendering
* fix permission issue for users without team seeing all records
* prevent error in spreadsheet renderer for empty invoices

src/Event/InvoicePostRenderEvent.php

@@ -0,0 +1,64 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Event;
+
+use App\Entity\InvoiceDocument;
+use App\Invoice\InvoiceModel;
+use App\Invoice\RendererInterface;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Contracts\EventDispatcher\Event;
+
+final class InvoicePostRenderEvent extends Event
+{
+    /**
+     * @var InvoiceModel
+     */
+    private $model;
+    /**
+     * @var InvoiceDocument
+     */
+    private $document;
+    /**
+     * @var RendererInterface
+     */
+    private $renderer;
+    /**
+     * @var Response
+     */
+    private $response;
+
+    public function __construct(InvoiceModel $model, InvoiceDocument $document, RendererInterface $renderer, Response $response)
+    {
+        $this->model = $model;
+        $this->document = $document;
+        $this->renderer = $renderer;
+        $this->response = $response;
+    }
+
+    public function getModel(): InvoiceModel
+    {
+        return $this->model;
+    }
+
+    public function getDocument(): InvoiceDocument
+    {
+        return $this->document;
+    }
+
+    public function getRenderer(): RendererInterface
+    {
+        return $this->renderer;
+    }
+
+    public function getResponse(): Response
+    {
+        return $this->response;
+    }
+}

src/Event/InvoicePreRenderEvent.php

@@ -0,0 +1,53 @@
+<?php
+
+/*
+ * This file is part of the Kimai time-tracking app.
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace App\Event;
+
+use App\Entity\InvoiceDocument;
+use App\Invoice\InvoiceModel;
+use App\Invoice\RendererInterface;
+use Symfony\Contracts\EventDispatcher\Event;
+
+final class InvoicePreRenderEvent extends Event
+{
+    /**
+     * @var InvoiceModel
+     */
+    private $model;
+    /**
+     * @var InvoiceDocument
+     */
+    private $document;
+    /**
+     * @var RendererInterface
+     */
+    private $renderer;
+
+    public function __construct(InvoiceModel $model, InvoiceDocument $document, RendererInterface $renderer)
+    {
+        $this->model = $model;
+        $this->document = $document;
+        $this->renderer = $renderer;
+    }
+
+    public function getModel(): InvoiceModel
+    {
+        return $this->model;
+    }
+
+    public function getDocument(): InvoiceDocument
+    {
+        return $this->document;
+    }
+
+    public function getRenderer(): RendererInterface
+    {
+        return $this->renderer;
+    }
+}