Fixed

OnSched 3.13.1 - company-scoped unavailability calendar

API

  • GET /v3/unavailability?syncExternal=true: External calendar ingest now runs only for Resources that belong to the authenticated company, including when ResourceIds is supplied. Unknown or other-company Resource UUIDs are ignored for ingest; the list still returns 200 with company-scoped rows.
  • Calendar list scope: Weekly hours, recurring blocks, holidays, and appointment-linked rows are limited to Locations, Resources, and Services owned by the authenticated company. Other-company UUIDs in LocationIds, ResourceIds, or ServiceId do not return those entities' calendar rows.
  • Deprecated alias: GET /v3/unavailability/calendar follows the same company scope.