REST API - Filter by non existant tag returns all records

[sinag]

Describe the issue

We are planning to use tag field to integrate kimai records to another systems records.
I am not sure if the original behaviour, when tag does not exist return all rows is meaningfull for other scenarios but generally when you filter for something which does not exist you expect to see zero records.

Is there a workaround for this?

I already tried

• I've read and searched the documentation.
• I've searched for similar issues in this repository.
• I've searched for similar issues in the discussions.

Kimai version

2.15.0

How do you run Kimai?

Docker

Which PHP version are you using?

Unknown

Logfile

No response

Screenshots

No response

[sinag]

Let me give you more details on my usage scenario;

1. user opens a record on external system with record.id = 1
2. external system is configured to show current record's related kimai timesheets
3. external system queries kimai api with tags[]=1, if tag has not been created before, kimai returns all timesheets, expectation was to see no timesheets

[kevinpapst]

when you filter for something which does not exist you expect to see zero records.

No. This behavior is unspecified. Kimai can't find a tag, so it queries without tag, which leads to all results. That's how tags currently work.

In the API it would be better if there was a validation, in that case your result would be a Bad request.