Andras Bacsai
d080bf35e6
refactor(policies): remove unused authorization methods ( #12165 )
2026-10-14 10:18:05 +02:00
Andras Bacsai and Claude Opus 4.7
6a5fd40a5c
refactor(policies): add uploadBackup ability and enforce it on backup upload endpoint
...
Introduce a dedicated `uploadBackup` ability on Application, Database,
Service, and ServiceDatabase policies (admin/owner only) and call
`$this->authorize('uploadBackup', $resource)` in `UploadController::upload`
so the backup-upload endpoint goes through the same policy layer as the
rest of the authorization refactor. Adds Pest coverage for each policy
variant plus HTTP-level checks.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
2026-04-20 11:51:35 +02:00
Andras Bacsai
86b05b902a
fix(auth): enforce authorization checks across API and Livewire components
...
- Add authorization checks to API controller endpoints (view, create, update, delete)
- Wrap Livewire component methods with try-catch for consistent error handling
- Add AuthorizesRequests trait to components requiring authorization checks
- Ensure all sensitive operations verify user permissions before execution
- Implement unified error handling with handleError() helper function
2026-02-25 14:20:29 +01:00
Andras Bacsai
63fcc0ebc3
feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.
2025-08-26 10:27:38 +02:00
Andras Bacsai
3e1f47a243
feat(auth): introduce resource creation authorization middleware and policies for enhanced access control
2025-08-26 10:27:38 +02:00
Andras Bacsai
40f108d6e1
feat(auth): implement authorization checks for application management
2025-08-22 16:47:59 +02:00
Thijmen
d86274cc37
Fix styling
2024-06-10 20:43:34 +00:00
Andras Bacsai
b3800fc42e
init policies
2024-05-24 14:15:16 +02:00
Andras Bacsai
Thijmen
Andras Bacsai