5 Commits

Include renames

Author	SHA1	Message	Date
Andras Bacsai	fb854a7cff	fix(access): hide shared variables and actions that a member cannot use ... - Check read access on the project or environment for shared variables pages, the canvas, and the sidebar, not only navigation access - Require team-wide read for the server shared variables canvas API - Open the environment variable editor read-only when the value is hidden - Show the integration tokens button only to users who can open it - Show disabled confirmation buttons as disabled, not as danger buttons	2026-10-30 15:14:02 +01:00
Andras Bacsai	2796609e96	feat(access): add scoped grants for team members and API tokens (#12329)	2026-10-26 12:13:20 +01:00
Andras Bacsai	86b05b902a	fix(auth): enforce authorization checks across API and Livewire components ... - Add authorization checks to API controller endpoints (view, create, update, delete) - Wrap Livewire component methods with try-catch for consistent error handling - Add AuthorizesRequests trait to components requiring authorization checks - Ensure all sensitive operations verify user permissions before execution - Implement unified error handling with handleError() helper function	2026-02-25 14:20:29 +01:00
Andras Bacsai	63fcc0ebc3	feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.	2025-08-26 10:27:38 +02:00
Andras Bacsai	3e1f47a243	feat(auth): introduce resource creation authorization middleware and policies for enhanced access control	2025-08-26 10:27:38 +02:00