fs e29e6c3136 fix(tenants-create): define $canUpdateTenant before form partial ...

The shared _form.phtml partial reads $canUpdateTenant for the per-theme
logo upload blocks added in 6e3fc63c, but create(default).phtml never
defined it — every visit to admin/tenants/create raised an undefined-
variable warning and a 500.

In create-mode the actor has full edit authority over the form they are
filling in (the create-authorize gate has already passed), so set
$canUpdateTenant = true before requiring _form.phtml. Mirrors the value
that edit($id).php derives from the EDIT_CONTEXT capabilities map.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-26 10:05:42 +02:00

..

account

refactor(pages): replace superglobals with request/session abstractions

2026-03-06 11:28:22 +01:00

admin

fix(tenants-create): define $canUpdateTenant before form partial

2026-04-26 10:05:42 +02:00

api/v1

harden(api-login): remove account-state leak and equalize failure timing

2026-04-25 21:37:09 +02:00

auth

harden(logout): enforce POST+CSRF and remove GET logout triggers

2026-04-25 23:35:03 +02:00

branding

major update

2026-03-04 15:56:58 +01:00

error

add composer-unused, comprehensive docs, and project restructure

2026-02-22 15:27:35 +01:00

flash

refactor(actions): centralize core page request/csrf guards

2026-04-24 19:10:37 +02:00

help

feat: centralize breadcrumbs in topbar and remove history navigation

2026-04-05 17:17:06 +02:00

page

refactor(actions): centralize core page request/csrf guards

2026-04-24 19:10:37 +02:00

public-page

fix: standardize save buttons to use app-action-success class

2026-03-22 16:48:57 +01:00

search

feat: centralize breadcrumbs in topbar and remove history navigation

2026-04-05 17:17:06 +02:00

index().php

refactor(pages): replace superglobals with request/session abstractions

2026-03-06 11:28:22 +01:00

lang().php

refactor(actions): centralize core page request/csrf guards

2026-04-24 19:10:37 +02:00