White list the working plan and working plan exceptions when saving a provider record

This commit is contained in:
Alex Tselegidis 2023-03-01 08:26:58 +01:00
parent 5827a36d7a
commit 963413eb88

View file

@ -63,7 +63,7 @@ class Providers extends EA_Controller {
$services = $this->services_model->get(); $services = $this->services_model->get();
foreach($services as &$service) foreach ($services as &$service)
{ {
$this->services_model->only($service, ['id', 'name']); $this->services_model->only($service, ['id', 'name']);
} }
@ -158,6 +158,8 @@ class Providers extends EA_Controller {
$this->providers_model->only($provider['settings'], [ $this->providers_model->only($provider['settings'], [
'username', 'username',
'password', 'password',
'working_plan',
'working_plan_exceptions',
'notifications', 'notifications',
'calendar_view' 'calendar_view'
]); ]);
@ -217,6 +219,15 @@ class Providers extends EA_Controller {
'services', 'services',
]); ]);
$this->providers_model->only($provider['settings'], [
'username',
'password',
'working_plan',
'working_plan_exceptions',
'notifications',
'calendar_view'
]);
$this->providers_model->optional($provider, [ $this->providers_model->optional($provider, [
'services' => [], 'services' => [],
]); ]);