31a8f887a5
* bump version * fix formatting locale reset after embedded controller sub-requests (#5944) * fix GHSA-c6w6-57jj-62vh * fix GHSA-m492-gv72-xvxj * fix GHSA-jr9p-4h4j-6c58 * make sure to only use JS logic to call API endpoints * fixes GHSA-r8vr-m544-qh4h * make sure to only use JS logic to call API endpoints * fix GHSA-rw46-qg69-vg6h * fix GHSA-pj8j-p4g4-4vw8 - prevent kimai from rendering images via markdown * fix GHSA-pj8j-p4g4-4vw8 - use a safe network client to prevent SSRF via images * fix GHSA-xv4r-4885-gwpg * fix GHSA-pgcc-vfmc-7cw5 - move GET routes to API with POST method to prevent CSRF * fix tooltip survives page reload * updated wizard images * split wizard and password reset subscriber into two classes * relax upper php limit * added zizmor workflow scans and apply findings * user permissions <name>_other_profile now respect teams * move all linting steps to new job * updated docker image version names * use .env.local for storing APP_SECRET * improve build order and use given tag as ref for checkout, not default main branch * improved APP_SECRET handling, see entrypoint.sh * use local code for building the image for more flexibility, added dockerignore
45 lines
1.9 KiB
Twig
45 lines
1.9 KiB
Twig
{%
|
|
set options = {
|
|
'teams': teams,
|
|
'team': team|default(null),
|
|
'route_create': route_create|default(null),
|
|
'route_edit': route_edit|default(null),
|
|
'empty_message': empty_message|default('team.visibility_global')
|
|
}
|
|
%}
|
|
{% embed '@theme/embeds/card.html.twig' with options %}
|
|
{% import "macros/widgets.html.twig" as widgets %}
|
|
{% block box_tools %}
|
|
{% if route_create is not null and (teams|length == 0 or team is null) and is_granted('create_team') %}
|
|
{{ widgets.card_tool_button('create', {
|
|
'title': 'team.create_default',
|
|
'translation_domain': 'teams',
|
|
'url': '#',
|
|
'class': 'api-link',
|
|
'attr': {
|
|
'data-href': route_create,
|
|
'data-method': 'POST',
|
|
'data-event': 'kimai.teamUpdate',
|
|
'data-msg-error': 'action.update.error'
|
|
}
|
|
}) }}
|
|
{% endif %}
|
|
{% if route_edit is not null %}
|
|
{{ widgets.card_tool_button('edit', {'class': 'modal-ajax-form open-edit', 'title': 'edit', 'url': route_edit}) }}
|
|
{% endif %}
|
|
{% endblock %}
|
|
{% block box_attributes %}id="team_listing_box"{% endblock %}
|
|
{% block box_title %}
|
|
{{ 'permissions'|trans }}
|
|
{% if teams|length > 0 %}<small class="text-body-secondary d-none d-sm-inline ms-1">{{ 'team.visibility_restricted'|trans({}, 'teams') }}</small>{% endif %}
|
|
{% endblock %}
|
|
{% block box_body_class %}{% if teams|length > 0 %}p-0{% endif %}{% endblock %}
|
|
{% block box_body %}
|
|
{% if teams|length > 0 %}
|
|
{{ widgets.team_list(teams, {name_class: 'w-min'}) }}
|
|
{% else %}
|
|
<div class="comment">{{ empty_message|default('team.visibility_global')|trans({}, 'teams') }}</div>
|
|
{% endif %}
|
|
{% endblock %}
|
|
{% endembed %}
|