coolify

starred/coolify

Fork 0

mirror of https://github.com/coollabsio/coolify.git synced 2026-11-06 13:10:37 -04:00

Commit Graph

Author	SHA1	Message	Date
Andras Bacsai	7fe40f4cf6	fix(api): require deploy ability for server side effects Require deploy permission for API changes that trigger server side effects, including resource deletion, storage access, provider operations, and database imports. Also escape Docker cleanup filters and sanitize log drain server names.	2026-10-19 09:07:42 +02:00
Andras Bacsai	ac5a0c289f	fix(api): require the deploy ability for database imports from a server path An import with source=server reads a file at an absolute path on the server, but it needed only the write ability. - Return 403 without the deploy or root ability, the same as other host paths outside the resource directory	2026-10-05 21:23:43 +02:00

Author

SHA1

Message

Date

Andras Bacsai

7fe40f4cf6

fix(api): require deploy ability for server side effects

Require deploy permission for API changes that trigger server side effects, including resource deletion, storage access, provider operations, and database imports. Also escape Docker cleanup filters and sanitize log drain server names.

2026-10-19 09:07:42 +02:00

Andras Bacsai

ac5a0c289f

fix(api): require the deploy ability for database imports from a server path

An import with source=server reads a file at an absolute path on the
server, but it needed only the write ability.

- Return 403 without the deploy or root ability, the same as other host
  paths outside the resource directory

2026-10-05 21:23:43 +02:00