Release 1.6.2 (#1289)

* include user teams in user entity
* prevent unauthorized access via API
* improve teamlead permission handling in team timesheets
* add team data to user entity
* add security tests
* highlight menu for invoice template copy
* unified handling of invoice data across all templates
* access to the current users data in invoice templates
* permission improvement in invoice form
* allow to skip record rows
* allow to add new invoice locations without overwriting the global ones
* allow to order user preferences
* change permission for normal users with access to view_other_timesheets
* properly validate invoice template field length
* allow to replace multiple variables in cell values text
* upgraded office invoice template
* doctrine deprecation fix
* upgrade phpoffice/phpword
* fix future begin check for default rounding rules
* dashboard widget counter: respect visibility and teams - fixes #1161
* fix future begin check for default rounding rules
* added new events for pre and post invoice rendering
* fix permission issue for users without team seeing all records
* prevent error in spreadsheet renderer for empty invoices

config/packages/doctrine.yaml

@@ -28,7 +28,7 @@ doctrine:
         entity_managers:
             default:
                 connection: default
-                naming_strategy: doctrine.orm.naming_strategy.underscore
+                naming_strategy: doctrine.orm.naming_strategy.underscore_number_aware
                 auto_mapping: true
                 mappings:
                     App:

config/packages/nelmio_api_doc.yaml

@@ -21,9 +21,9 @@ nelmio_api_doc:
             - { alias: TimesheetMeta,             type: App\Entity\TimesheetMeta,                 groups: [Default, Timesheet] }
             - { alias: TimesheetCollection,       type: App\Entity\Timesheet,                     groups: [Default, Collection, Timesheet] }
             - { alias: TimesheetSubCollection,    type: App\Entity\Timesheet,                     groups: [Default, Subresource, Timesheet] }
-            - { alias: UserEntity,                type: App\Entity\User,                          groups: [Default, Entity, User] }
+            - { alias: UserEntity,                type: App\Entity\User,                          groups: [Default, Entity, User, User_Entity] }
             - { alias: UserCollection,            type: App\Entity\User,                          groups: [Default, Collection, User] }
-            - { alias: TeamEntity,                type: App\Entity\Team,                          groups: [Default, Entity, Team] }
+            - { alias: TeamEntity,                type: App\Entity\Team,                          groups: [Default, Entity, Team, Team_Entity] }
             - { alias: TeamCollection,            type: App\Entity\Team,                          groups: [Default, Collection, Team] }
             - { alias: I18nConfig,                type: App\API\Model\I18n,                       groups: [Default] }
     areas:

config/serializer/App/Entity.Team.yml

@@ -1,13 +1,17 @@
 App\Entity\Team:
     exclusion_policy: All
-    custom_accessor_order: [id, name, users]
+    custom_accessor_order: [id, name, teamlead, users]
     properties:
         id:
             include: true
         name:
             include: true
+        teamlead:
+            include: true
+            groups: [Team_Entity]
         users:
-            exclude: true
+            include: true
+            groups: [Team_Entity]
         customers:
             exclude: true
         projects:

config/serializer/App/Entity.User.yml

@@ -1,6 +1,6 @@
 App\Entity\User:
     exclusion_policy: All
-    custom_accessor_order: [id, alias, title, avatar, language, timezone]
+    custom_accessor_order: [id, alias, title, avatar, language, timezone, teams]
     properties:
         id:
             include: true
@@ -10,18 +10,21 @@ App\Entity\User:
             groups: [Default]
         title:
             include: true
-            groups: [Entity]
+            groups: [User_Entity]
         avatar:
             include: true
-            groups: [Entity]
+            groups: [User_Entity]
+        teams:
+            include: true
+            groups: [User_Entity]
     virtual_properties:
         getLanguage:
             serialized_name: language
             exp: "object.getPreferenceValue('language') === null ? null : object.getPreferenceValue('language')"
             type: string
-            groups: [Entity]
+            groups: [User_Entity]
         getTimezone:
             serialized_name: timezone
             exp: "object.getPreferenceValue('timezone') === null ? null : object.getPreferenceValue('timezone')"
             type: string
-            groups: [Entity]
+            groups: [User_Entity]

config/serializer/FOS/UserBundle/Model.User.yml

@@ -10,7 +10,7 @@ FOS\UserBundle\Model\User:
         roles:
             type: array<string>
             include: true
-            groups: [Entity]
+            groups: [User_Entity]
         groups:
             exclude: true
         email: