OBJSIS v2.7.1

Release Notes — OBJSIS v2.7.1

Release Date: 2026-06-28

---

🆕 New Features

Role Permission Editor (admin/roles.php)

• Full CRUD page for managing roles
• Per-role page-access control — admins choose exactly which menu sections a role can open
• Granular permission tags + page-group checkboxes (Dashboard, Kitchen, Orders, Inventory, etc.)
• 4 new API endpoints in api/admin_actions.php:
  • add_role
  • edit_role
  • delete_role
  • update_role_permissions
• Admin role is locked from edits/delete; deleting a role warns and disassociates users first

---

🐛 Bug Fixes

Kitchen KDS — "Run Kitchen" Button Unresponsive

• Button was completely dead due to missing CSRF token in the updateStatus() AJAX payload
• PHP handler was reading undefined $new_status / $order_id variables, so SQL always failed
• Both issues fixed in admin/kitchen.php — "Run Kitchen" and "Done / Ready" now work reliably

Role Permissions Modal — Selection Did Nothing

• openPermModal() and savePermissions() parsed permission IDs from fragile onclick attribute strings which no longer existed after the button-CSS rewrite
• Rewrote JS to use reliable data-permid attributes embedded directly by PHP
• savePermissions() now correctly updates the card preview without full page reload

Duplicate Role Name Crash

• add_role handler would let the DB throw a PDO Integrity constraint violation (duplicate name key), which dumped raw HTML into the JSON response and broke every fetch().json() on the admin panel (including kitchen.php polling)
• Now returns a proper { success: false, message: ... } JSON error before attempting the INSERT

---

🔧 Changes

• Bumped version constant to 2.7.1 (config/version.php)
• Added employees.php to project architecture docs (it is referenced in sidebar but missing from tree)

---

📦 Files Changed

File	Change
admin/roles.php	New — Role management page
api/admin_actions.php	New — add_role, edit_role, delete_role, update_role_permissions
admin/kitchen.php	CSRF token added + PHP variable assignment fixed
config/version.php	2.6.1 → 2.7.1
README.md	Version badge, features table, roadmap, release notes updated

---

⬆️ Upgrading

1. Pull/replace the changed files above
2. No database migration required — roles, permissions, and role_permissions tables already exist from the base install
3. Users with the admin role in $_SESSION['user_role'] automatically gain access to the new page (reload session if needed)

---

⚠️ Notes

• This is still a beta version, so some bugs may still be present
• Expect instability in certain edge cases
• Feedback is highly appreciated during testing phase

🛣️ Roadmap

• Full release v3.0.0 planned for end of next month
• Focus on stability, security improvements, and UI polish

Beta 1.7.0

🚀 Beta 1.7.0 – Release Notes

✨ New Features

• 🆕 Added new Admin page: roles.php
• Role management system fully redesigned
• Ability to edit roles directly from admin panel
• Support for editing role names
• Support for managing role permissions (granular control)
• Improved role assignment logic

⚙️ Improvements

• Better structure for permission handling
• Optimized role queries for faster admin loading
• Cleaner UI layout in roles management section

🔐 Roles System

• Roles now support dynamic permission mapping
• Easier extension for custom permissions
• Prepared foundation for future advanced RBAC system

🐛 Fixes

• Fixed minor inconsistencies in role loading
• Improved stability of admin panel routing

---

⚠️ Notes

• This is still a beta version, so some bugs may still be present
• Expect instability in certain edge cases
• Feedback is highly appreciated during testing phase
• this version not good for normal use in restaurant it is just beta

---

🛣️ Roadmap

• Full release v3.0.0 planned for end of next month

Beta 2.5.1

Userr managmetnr and role update

Beta 2.5.0

Hope you like it

Beta 2.3.0

New Features
Dynamic Role Management
Custom Roles: You can now create unlimited custom roles (e.g., "Manager", "Supervisor") beyond the default Admin/Waiter/Cook.
Permission Matrix: Granular control over which pages each role can access.
Migration: Existing users and roles have been automatically migrated to the new system.
UI: New Roles & Permissions page in Admin Dashboard.
Menu Caegory Management
Manage Categories: Create, edit, and delete menu categories directly from the admin panel (Management -> Categories).
Sorting: Define sort order for categories to control how they appear on the menu.
Menu Display Options
Photo Toggle: Added a setting to "Show Menu Photos" in Admin -> Settings.
Text-Only Mode: When photos are disabled, the customer kiosk displays a compact, streamlined card layout.
🛠 Improvements
Security Check: Enhanced backend permission validation (
checkPermission()
) for strict access control.
Sidebar: Navigation links now automatically hide based on the logged-in user's permissions.
User Management: Dropdown selection for roles when creating/editing users.
⚠️ Notes for Admin
Action Required: Users might need to re-login to refresh their permission cache.
Admin Lock: The primary 'Admin' role cannot be deleted or renamed to prevent system lockout.

Beta 2.2.2

Fixes
Sidebar Layout Gap: Fixed an issue where the main content area would briefly shift or display with an incorrect margin when navigating between pages with the sidebar collapsed.
State Persistence: The collapsed state of the sidebar is now stored and applied more reliably, preventing race conditions on page load.
Technical Details
Moved the collapsed state class to the element (.sidebar-collapsed-state) to ensure layout rules apply immediately before content rendering.
Updated
style.css
to use robust body-based selectors.

Beta 2.2.1

oreders display update
css update

Beta 2.2

fixed installer version issue

Beta 2.1

updates does not work
bad version