7 Commits

Include renames

Author	SHA1	Message	Date
Andras Bacsai	6f1905b7b0	fix(access): enforce member grants on more actions ... - Require write access on the target environment to clone or move a resource - Check read access on shared variables before a reference is added or resolved - Limit team credentials, git sources, and imports of other backups to team-wide writers - Require the delete level for backup, volume, storage, and task deletes - Require create access for previews, new projects, and git sources - Use the token team for the access scope, and check team-wide access on Livewire updates - Require instance admin to toggle the API and MCP server - Hide server pickers and broadcast details from members without access	2026-10-30 16:11:10 +01:00
Andras Bacsai	2796609e96	feat(access): add scoped grants for team members and API tokens (#12329)	2026-10-26 12:13:20 +01:00
6 people	6b07f03107	feat(terminal): interactive console mode for containers (docker attach) (#11538) ... Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com> Co-authored-by: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: rosslh <ross@rosshill.ca>	2026-10-14 14:32:02 +02:00
peaklabs-dev	92f8b806ea	feat(auth): authorize sqlite databases with the database policy	2026-09-24 19:03:42 +02:00
Andras Bacsai	86b05b902a	fix(auth): enforce authorization checks across API and Livewire components ... - Add authorization checks to API controller endpoints (view, create, update, delete) - Wrap Livewire component methods with try-catch for consistent error handling - Add AuthorizesRequests trait to components requiring authorization checks - Ensure all sensitive operations verify user permissions before execution - Implement unified error handling with handleError() helper function	2026-02-25 14:20:29 +01:00
Andras Bacsai	63fcc0ebc3	feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.	2025-08-26 10:27:38 +02:00
Andras Bacsai	3e1f47a243	feat(auth): introduce resource creation authorization middleware and policies for enhanced access control	2025-08-26 10:27:38 +02:00