update policy and fix other issues
This commit is contained in:
@@ -314,9 +314,8 @@ $routes->get('ui/style', 'View\UiController::style');
|
||||
//Timeout page after timeout
|
||||
$routes->get('session/get-timeout-config', 'View\SessionTimeoutController::getTimeoutConfig');
|
||||
$routes->get('session/check-timeout', 'View\SessionTimeoutController::checkTimeout');
|
||||
// Cap heartbeat to ~5 requests/minute per authenticated session (or IP if anonymous).
|
||||
$routes->post('session/ping-activity', 'View\SessionTimeoutController::pingActivity', ['filter' => 'apiratelimit:5,60']);
|
||||
$routes->post('session/ping', 'View\SessionTimeoutController::pingActivity', ['filter' => 'apiratelimit:5,60']);
|
||||
$routes->post('session/ping-activity', 'View\SessionTimeoutController::pingActivity');
|
||||
$routes->post('session/ping', 'View\SessionTimeoutController::pingActivity');
|
||||
|
||||
|
||||
/*
|
||||
@@ -927,6 +926,10 @@ $routes->get('nav-builder/delete/(:num)', 'View\NavBuilderController::delete/$1'
|
||||
$routes->post('nav-builder/reorder', 'View\NavBuilderController::reorder', ['filter' => 'auth']);
|
||||
|
||||
|
||||
// Teacher book distribution is the only inventory path teachers may access directly.
|
||||
$routes->get('inventory/books/distribute', 'View\InventoryController::teacherDistributeForm', ['filter' => 'auth:view_inventory|update_inventory|administrator|administrative staff|principal|teacher|teacher_assistant']);
|
||||
$routes->post('inventory/books/distribute', 'View\InventoryController::teacherDistributeStore', ['filter' => 'auth:view_inventory|update_inventory|administrator|administrative staff|principal|teacher|teacher_assistant,update']);
|
||||
|
||||
// Inventory routes
|
||||
$routes->group('inventory', ['filter' => 'auth:view_inventory|administrator|administrative staff|principal'], static function ($routes) {
|
||||
|
||||
@@ -952,8 +955,6 @@ $routes->group('inventory', ['filter' => 'auth:view_inventory|administrator|admi
|
||||
$routes->post('adjust/(:num)', 'View\InventoryController::adjustStore/$1', ['filter' => 'auth:update_inventory|administrator|administrative staff|principal,update']);
|
||||
$routes->get('book-prices', 'View\InventoryController::bookPrices');
|
||||
$routes->post('book-prices', 'View\InventoryController::updateBookPrices', ['filter' => 'auth:update_inventory|administrator|administrative staff|principal,update']);
|
||||
$routes->get('books/distribute', 'View\InventoryController::teacherDistributeForm');
|
||||
$routes->post('books/distribute', 'View\InventoryController::teacherDistributeStore', ['filter' => 'auth:update_inventory|administrator|administrative staff|principal,update']);
|
||||
$routes->get('classroom/audit/(:num)', 'View\InventoryController::auditClassroomForm/$1');
|
||||
$routes->post('classroom/audit/(:num)', 'View\InventoryController::auditClassroomStore/$1', ['filter' => 'auth:update_inventory|administrator|administrative staff|principal,update']);
|
||||
|
||||
|
||||
Reference in New Issue
Block a user