=== Voidek Employee Portal ===
Contributors:Voidek 
Donate link: https://voidek.in/our-products/voidek-employee-portal/
Tags: project management, employee management, frontend dashboard
Requires at least: 5.0  
Tested up to: 6.9  
Stable tag: 1.0.8
Requires PHP: 7.4  
License: GPLv2 or later  
License URI: https://www.gnu.org/licenses/gpl-2.0.html  

A full-featured frontend employee management plugin with projects, tasks, EOD reports, user roles (Admin, Manager, Employee).

== Description ==
**Voidek Employee Portal** is a powerful and customizable plugin designed to give employees a full-featured interface in the frontend of your WordPress site. Ideal for internal portals or company intranets, this plugin supports task tracking, EOD (End of Day) reports, and leave applications — all from a user-friendly frontend interface.

Features include:

- Frontend Dashboard for employees
- Role-based access: Admins see backend, users see frontend
- Task assignment and tracking
- EOD reporting with filters and summaries
- Leave applications and approval tracking
- Fully AJAX-powered, responsive interface
- Secure role-based redirection and access


== Installation ==
1. Upload the plugin files to the `/wp-content/plugins/your-plugin` directory.
2. Activate the plugin through the "Plugins" menu in WordPress.
3. Configure the settings in the dashboard.
4. A page titled **User Dashboard** will be automatically created.
5. You can access the frontend employee dashboard via:
   https://yoursite.com/user-dashboard
6. Ensure **Pretty Permalinks** are enabled via **Settings > Permalinks**.
7. From **Users > Add New**, create Manager users by assigning them the **Manager** role.
8. Managers can then:
   - Add employees
   - Create projects
   - Create tasks and assign them
   - Submit and view EOD reports
   - Use the calendar to manage events, holidays, and employee info

== Roles and Permissions ==
**Admin**  
-  Full access to backend  
-  Can create Manager and Employee users  
-  Can manage all projects, tasks, EODs, and leaves  
-  Does not use the frontend dashboard  

**Manager**  
-  Accesses the **frontend dashboard**  
-  Can add Employee users from the frontend  
-  Can create, edit, and assign **projects**  
-  Can assign and track **tasks**  
-  Can view and approve team **EOD reports**  
-  Can view calendar events, team leave data, anniversaries, and birthdays
-  Cannot access the backend admin area  

**Employee**  
-  Accesses the **frontend dashboard**  
-  Can manage their own **tasks**  
-  Can submit daily **EOD reports**  
-  Can apply for and view **leave requests**  
-  Can view assigned projects, tasks, and leaves  
-  Cannot add other users  
-  Cannot create new projects  

**Common to All Roles (Admin, Manager, Employee)**  
-  Can create and work on **Tasks**  
-  Can submit **EODs (End of Day reports)** for each task  
-  Can view **Task Summary**  
-  Can view **EOD List and EOD Summary**  
-  Can apply for and view **Leave Requests**


== Frequently Asked Questions ==
= Does this plugin require any other plugins? =
No, it works independently.

= How do I create a manager? =  
Go to **Users > Add New** in the WP Admin, and assign the role `Manager`. That user will then access the frontend dashboard upon login.

= Can a manager add employees? =  
Yes. After logging into the frontend, managers have access to a “Users” section to add and manage employees.

= Can everyone create tasks and EODs? =  
Yes, Admins, Managers, and Employees can all create tasks and submit EODs related to their work.

= Are EODs linked to specific tasks? =  
Yes. When adding an EOD, the user selects a task to associate it with. This makes summaries more organized and traceable.

= Can I see a list of all tasks and EODs? =  
Yes. Each role has access to relevant **task lists**, **EOD lists**, and **summaries**. Managers see more than Employees.

= Can I customize the frontend dashboard? =
Yes, you can modify the templates in the `/templates/` folder.

= Can employees see each other's data? =  
No. Employees only see their own data unless permissions are extended.

= Is the frontend dashboard fully AJAX? =  
Yes! All template content (pages, forms, filters, pagination) loads via AJAX for a smooth, fast experience without page reloads.

== Source Code ==

This plugin bundles the following third-party libraries (all MIT licensed):

- **Bootstrap 5** (CSS/JS)  
- **DataTables & Buttons Extension**  
- **SweetAlert2**  
- **Date Range Picker**  
- **jQuery UI** + **Timepicker Addon**  
- **Font Awesome**  
- **JSZip**

All files are included unmodified in the `/assets/` folder.  
Original sources and licenses are available on their respective official repositories/CDNs.

== Screenshots ==
1. Dashboard Overview
2. Manager project assignment panel
3. Task creation 
4. EOD submission form
5. EOD Report Filters
6. Leave Request Form
7. Calendar View

== Changelog ==
= 1.0.0 =
* Initial release
* Admin can assign Manager role
* Managers can create users/projects
* Fully AJAX-based frontend templates
* Modules: Tasks, EOD, Leave

= 1.0.8 =
* Security: Fixed missing authorization checks in AJAX actions
* Security: Added proper capability validation using current_user_can()
* Security: Removed unauthorized access to privileged AJAX endpoints
* Security: Hardened nonce usage for CSRF protection
* Security: Prevented unauthenticated user actions
* Security: Improved role and capability handling for Manager and Employee
* Security: Added ownership checks to prevent unauthorized data modification
* Improved overall plugin security and WordPress coding standards compliance

== Upgrade Notice ==
= 1.0.0 =
* First stable version released.
                                      