coolify

starred/coolify

Fork 0

mirror of https://github.com/coollabsio/coolify.git synced 2026-11-06 13:10:37 -04:00

Commit Graph

Author	SHA1	Message	Date
Andras Bacsai Claude Opus 5.5 peaklabs-dev Aditya Tripathi	033f0c84da	v4.7 (#12478 ) Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com> Co-authored-by: Aditya Tripathi <aditya@climactic.co>	2026-11-06 14:25:02 +01:00
Andras Bacsai	3379f85c0a	fix(security): authorize import file checks and Vultr status refresh ImportForm::checkFile() and checkS3File() ran without authorization, so a member with view access could check whether paths exist on the server or probe S3. They now require update access, like the restore actions. Server\Show::checkVultrInstanceStatus() now requires view access, like the Hetzner and DigitalOcean checks.	2026-10-01 20:31:00 +02:00

Author

SHA1

Message

Date

033f0c84da

v4.7 (#12478 )

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>
Co-authored-by: Aditya Tripathi <aditya@climactic.co>

2026-11-06 14:25:02 +01:00

Andras Bacsai

3379f85c0a

fix(security): authorize import file checks and Vultr status refresh

ImportForm::checkFile() and checkS3File() ran without authorization, so
a member with view access could check whether paths exist on the server
or probe S3. They now require update access, like the restore actions.
Server\Show::checkVultrInstanceStatus() now requires view access, like
the Hetzner and DigitalOcean checks.

2026-10-01 20:31:00 +02:00