Jared Vititoe a403e49537 Use canUserAccessTicket() in clone_ticket.php; fix README bootstrap entry ...

- clone_ticket.php: replace custom visibility check with centralized canUserAccessTicket(); return 404 (not 403) for inaccessible tickets
- README.md: remove bootstrap.php from the API endpoints table (it's a shared include, not a public endpoint); correct its project structure description

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-20 21:47:03 -04:00

4.4 KiB

Raw Blame History

View Raw