security fix and fix parent pages
API CI/CD / Validate (composer + pint) (push) Successful in 3m7s
API CI/CD / Test (PHPUnit) (push) Failing after 5m46s
API CI/CD / Build frontend assets (push) Successful in 1m2s
API CI/CD / Security audit (push) Failing after 49s
API CI/CD / Deploy to shared hosting (PHP) (push) Has been skipped

This commit is contained in:
root
2026-07-06 02:14:16 -04:00
parent 39228168c8
commit 90f9857b06
43 changed files with 4323 additions and 132 deletions
@@ -96,7 +96,9 @@ class ClassProgressController extends BaseApiController
$filters = $request->validated();
$meta = $this->queryService->meta($filters['school_year'] ?? null, $filters['semester'] ?? null);
$filters['school_year'] = $filters['school_year'] ?? ($meta['school_year'] ?? null);
$filters['semester'] = $filters['semester'] ?? ($meta['semester'] ?? null);
if ($this->isAdminProgressAliasRoute($request)) {
$filters['group_by_week'] = true;
}
$paginator = $this->queryService->listReports($auth, $filters);
if (! empty($filters['group_by_week'])) {
@@ -262,6 +264,12 @@ class ClassProgressController extends BaseApiController
|| $request->is('api/v1/teacher/class-progress-view');
}
private function isAdminProgressAliasRoute(ClassProgressIndexRequest $request): bool
{
return $request->is('api/v1/administrator/progress')
|| $request->is('api/v1/admin/progress');
}
/**
* @param list<string> $roles
*/