fix: make project template inheritance granular and safe

2026-09-08 10:25:52 +00:00
parent fed6a282a4
commit 9895fc36db
50 changed files with 1504 additions and 624 deletions
@@ -29,16 +29,13 @@ class MoveProjectTicketRequest extends FormRequest
    {
        /** @var Project $project */
        $project = $this->route('project');
-        $projectTemplateId = $project->project_template_id;
-        $ownershipColumn = $projectTemplateId === null ? 'project_id' : 'project_template_id';
-        $ownershipValue = $projectTemplateId ?? $project->id;

        return [
            'ticket_status_id' => [
                'required',
                'integer',
                Rule::exists('ticket_statuses', 'id')->where(
-                    fn ($query) => $query->where($ownershipColumn, $ownershipValue),
+                    fn ($query) => $query->where('project_id', $project->id),
                ),
            ],
            'redirect_to' => ['required', 'string', Rule::in(['backlog', 'board'])],