mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-14 16:52:45 -04:00
ImportForm::checkFile() and checkS3File() ran without authorization, so a member with view access could check whether paths exist on the server or probe S3. They now require update access, like the restore actions. Server\Show::checkVultrInstanceStatus() now requires view access, like the Hetzner and DigitalOcean checks.