Progress update in release notes

API/v1/office/stompjes/GET Stomp.md

@@ -0,0 +1,63 @@
+# GET Stomp
+This will get stompjes from the database.
+
+#### Location
+```
+/api/v1/office/stompjes/
+```
+
+#### Permissions required
+`office-stompjes` RO
+
+#### Body parameters
+| Parameter            | Type   | Required | Description |
+| -------------------- | ------ | -------- | ----------- |
+| builder[0][where][0] | string | no       |             |
+| builder[0][where][1] | string | no       |             |
+
+### Example Body (json)
+None.
+
+### Example Request
+```php
+$curl = curl_init();
+
+curl_setopt_array($curl, [
+    CURLOPT_URL => $baseUrl . '/api/v1/office/stompjes/' . 'builder[0][where][0]=user_uuid&builder[0][where][1]=5219edbb-512d-11f1-8bac-bc2411125ba4',
+    CURLOPT_RETURNTRANSFER => true,
+    CURLOPT_HTTPHEADER => [
+        'Authorization: Bearer ' . $token,
+    ],
+]);
+
+$response = curl_exec($curl);
+$httpCode = curl_getinfo($curl, CURLINFO_HTTP_CODE);
+
+if ($response === false) {
+    echo curl_error($curl);
+}
+
+curl_close($curl);
+```
+
+### Example Response
+```json
+[
+   {
+      "stomp_uuid":"16b148da-5c76-11f1-8eb6-bc2411125ba4",
+      "user_uuid":"5219edbb-512d-11f1-8bac-bc2411125ba4",
+      "stomp_timestamp":1780179768,
+      "stomp_reason":null
+   },
+   {
+      "stomp_uuid":"ea5b47d6-5c75-11f1-8eb6-bc2411125ba4",
+      "user_uuid":"5219edbb-512d-11f1-8bac-bc2411125ba4",
+      "stomp_timestamp":1780179693,
+      "stomp_reason":null
+   }
+]
+```
+
+#### Known errors or issues.
+None are known at the time
+If you do encounter issues and get an http code in return, check the response codes on this page.

API/v1/office/stompjes/POST Stomp user.md

@@ -7,7 +7,7 @@ This API call adds a stomp to a user.
 ```
 
 #### Permissions required
-`ofice-stompjes-canstomp` RW
+`office-stompjes-canstomp` RW
 
 #### Body parameters
 | Parameter | Type | Required | Description                         |

API/v1/portal-management/users/PUT User.md

@@ -7,20 +7,21 @@ This PUT request updates a user.
 ```
 
 #### Permissions required
-`admin-access-admins` RW.
+`admin-access-admins` RW. If you are changing your own user you don't need any permissions. 
 
 #### Body parameters
 | Parameter           | Type    | Required | Description                                                                                                                                                       |
-| ------------------ | ------- | -------- | ------------------------------------------------------------------------------------------------------------------------ |
+| ------------------- | ------- | -------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
 | user_uuid           | uuid    | yes      | The users unique id.                                                                                                                                              |
-| user_group_uuid    | uuid    | yes      | The user-group unique id for the user.                                                                                   |
+| user_group_uuid     | uuid    | yes      | The user-group unique id for the user. <br>*Not allowed when changing own user.*                                                                                  |
 | user_email          | email   | yes      | The email address of the user.                                                                                                                                    |
 | user_first_name     | string  | yes      | The first name of the user.                                                                                                                                       |
 | user_last_name      | string  | yes      | The last name of the user.                                                                                                                                        |
-| user_phone_number  | string  | yes      | The phone number of the user.                                                                                            |
-| user_status        | enum    | yes      | The user status of the user.  Either `inactive`, `banned` or `pending`                                                   |
+| user_phone_number   | string  | no       | The phone number of the user.                                                                                                                                     |
+| user_status         | enum    | yes      | The user status of the user.  Either `inactive`, `banned` or `pending`.<br>*Not allowed when changing own user.*                                                  |
 | user_pref_language  | enum    | yes      | Either `en` or `nl`                                                                                                                                               |
-| user_stompable     | boolean | yes      | Makes the user stompable, related to the [stompjes](API/v1/office/stompjes/POST%20Stomp%20user.md) in the office module. |
+| user_stompable      | boolean | no       | Makes the user stompable, related to the [stompjes](API/v1/office/stompjes/POST%20Stomp%20user.md) in the office module.<br>*Not allowed when changing own user.* |
+| user_profile_change | boolean | no       | Add this value to change your own profile.                                                                                                                        |
 
 ### Example Body (json)
 ```json

Release notes.md

@@ -10,6 +10,10 @@
 - [bc8976c18e](https://gitea.mooij.me/meteo/Sentri/commit/bc8976c18e98ad6be637f24bd5e0ef3f52d64002) API user creation does not set the `user_full_name`.
 - [1374ba2f13](https://gitea.mooij.me/meteo/Sentri/commit/1374ba2f1387c3b50dafcd3578c3bf4faa8f96f9) Module enablement toggle feedback is fixed. 
 - [aece25439b](https://gitea.mooij.me/meteo/Sentri/commit/aece25439be70cb801cda43ad288b67a9ea2bc97) Inserve configuration API call does not longer require the obsolete `source_name` field.
+- [9de2fc0ad1](https://gitea.mooij.me/meteo/Sentri/commit/9de2fc0ad14aa32ed9e36940f1137b382d04bc4e) Users are not able to change their own name.
+- [c408e43283](https://gitea.mooij.me/meteo/Sentri/commit/c408e4328366ffe5b699715dfd1e0b0fd47ce5d9) SQL-Injection vulnerability in GET function resolved.
+- [98d5d1cb18](https://gitea.mooij.me/meteo/Sentri/commit/98d5d1cb18d043a735fefb66de053e399c27ef0b) GET stomp API call added.
+- [a7e3c54a89](https://gitea.mooij.me/meteo/Sentri/commit/a7e3c54a89672b96391c3c5894a84f4b5de6b7d0) Fixed the `ofice` typo in the permission names to `office`
 
 ## v.1.2.2
 `29-05-2026`
@@ -35,8 +39,7 @@
 - Issue with new server licenses having "0" as name.
 - Fixed all the CSS errors.
 ### Known issues
-- Users are not able to change their own name.
-- No check on users being linked to a group before deleting it.
+- No check on users being linked to a group before deleting it, returns 500 if so. 
 - There is no validation of the `portal_uuid` when configuring mail settings.
 - A lot of GET API calls missing or not working correctly.