Andras Bacsai
3987f97a8e
fix(subscription): require team admin for billing actions
...
Subscription actions ran on the session team without a role check. A user
who switched the session to a team where they are only a member could
cancel, refund, or change that team's subscription.
- Lock the team id at mount and require admin or owner of that team
- Check the locked team and the role again in every billing action
- Reject actions after the session switched to another team
2026-10-05 17:04:05 +02:00
..
2026-10-05 11:08:52 +02:00
2026-10-05 14:23:04 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 14:23:04 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-10-03 20:50:49 +02:00
2026-10-05 14:23:04 +02:00
2026-09-25 19:00:00 +02:00
2026-10-01 09:31:47 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 11:08:52 +02:00
2026-10-04 17:32:50 +02:00
2026-10-04 12:03:54 +02:00
2026-09-30 18:10:10 +02:00
2026-10-05 17:04:05 +02:00
2026-09-30 18:10:10 +02:00
2026-10-05 11:28:03 +02:00
2026-10-05 11:08:52 +02:00
2026-09-28 00:18:16 +02:00
2026-10-04 17:32:50 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-24 15:46:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-27 13:47:01 +02:00
2026-09-28 11:55:56 +02:00
2026-09-24 22:15:09 +02:00
2026-09-29 13:06:44 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 11:09:13 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 15:09:25 +02:00
2026-10-05 11:08:52 +02:00
2026-10-01 20:31:00 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 19:23:35 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 10:47:01 +02:00
2026-09-16 12:51:27 +02:00
2026-09-26 22:18:17 +02:00
2026-09-16 13:33:29 +02:00
2026-10-04 00:52:17 +02:00
2026-09-27 16:53:54 +02:00
2026-10-04 12:29:48 +02:00
2026-10-05 15:09:25 +02:00
2026-09-25 07:05:03 +02:00
2026-10-04 17:32:50 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 11:55:56 +02:00
2026-10-02 16:01:10 +02:00
2026-10-04 17:32:50 +02:00
2026-10-04 12:26:37 +02:00
2026-10-02 16:01:10 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 10:46:44 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-09-13 15:25:20 +02:00
2026-09-28 11:50:32 +02:00
2026-10-02 16:00:29 +02:00
2026-10-03 21:25:00 +02:00
2026-09-29 11:29:39 +02:00
2026-09-29 11:29:39 +02:00
2026-10-04 12:13:41 +02:00
2026-09-30 18:10:10 +02:00
2026-09-30 14:31:33 +02:00
2026-10-05 14:23:04 +02:00
2026-10-05 14:23:04 +02:00
2026-09-26 20:27:28 +02:00
2026-09-27 14:37:21 +02:00
2026-09-28 11:55:56 +02:00
2026-09-30 12:29:50 +02:00
2026-09-25 19:00:00 +02:00
2026-09-25 19:00:00 +02:00
2026-09-30 13:35:22 +02:00
2026-10-02 16:01:20 +02:00
2026-09-27 14:37:21 +02:00
2026-09-30 19:23:35 +02:00
2026-09-28 21:16:11 +02:00
2026-10-04 00:35:21 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-10-02 16:01:20 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 11:55:56 +02:00
2026-10-01 20:31:00 +02:00
2026-09-09 13:43:56 +02:00
2026-10-03 21:24:54 +02:00
2026-09-30 18:59:49 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 19:01:11 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 19:01:11 +02:00
2026-09-30 18:10:10 +02:00
2026-09-25 13:15:57 +02:00
2026-09-25 19:00:00 +02:00
2026-09-30 08:02:02 +02:00
2026-10-02 16:00:52 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 14:23:04 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 19:23:35 +02:00
2026-10-05 11:08:52 +02:00
2026-09-29 09:58:54 +02:00
2026-09-28 09:45:29 +02:00
2026-09-25 07:05:03 +02:00
2026-09-28 11:55:56 +02:00
2026-09-27 15:21:39 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 09:45:29 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-09-30 18:10:10 +02:00
2026-09-30 18:10:10 +02:00
2026-10-03 21:25:17 +02:00
2026-09-07 15:17:23 +02:00
2026-09-28 00:18:16 +02:00
2026-09-24 21:07:47 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 18:10:10 +02:00
2026-09-08 10:02:12 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-29 22:36:56 +02:00
2026-09-08 11:49:02 +02:00
2026-09-21 15:42:12 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-29 10:19:57 +02:00
2026-10-05 11:08:52 +02:00
2026-09-24 23:22:35 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 18:10:18 +02:00
2026-10-03 21:25:00 +02:00
2026-09-28 11:09:13 +02:00
2026-09-08 20:33:45 +02:00
2026-09-28 00:18:16 +02:00
2026-09-27 14:37:21 +02:00
2026-10-05 12:03:37 +02:00
2026-10-02 16:01:00 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 11:12:48 +02:00
2026-09-23 23:09:04 +02:00
2026-09-29 22:36:56 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 11:40:36 +02:00
2026-09-30 11:40:36 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-14 20:50:16 +02:00
2026-09-29 10:19:57 +02:00
2026-10-03 23:39:38 +02:00
2026-10-05 09:17:10 +02:00
2026-09-25 11:55:49 +02:00
2026-10-05 12:03:37 +02:00
2026-09-28 00:18:16 +02:00
2026-09-07 15:17:23 +02:00
2026-09-28 00:18:16 +02:00
2026-09-23 22:50:37 +02:00
2026-09-30 18:10:10 +02:00
2026-10-02 16:01:00 +02:00
2026-09-24 21:18:31 +02:00
2026-10-05 14:23:04 +02:00
2026-09-30 18:10:10 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 13:35:22 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-24 22:15:09 +02:00
2026-10-05 12:03:37 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 11:35:46 +02:00
2026-10-05 11:08:52 +02:00
2026-09-30 18:10:10 +02:00
2026-10-02 16:01:25 +02:00
2026-09-30 18:10:10 +02:00
2026-10-02 17:07:54 +02:00
2026-09-30 21:37:02 +02:00
2026-09-30 13:35:22 +02:00
2026-10-02 16:01:10 +02:00
2026-09-24 16:56:38 +02:00
2026-10-02 18:51:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 11:55:56 +02:00
2026-09-28 11:55:56 +02:00
2026-09-28 10:47:01 +02:00
2026-09-28 10:13:20 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 09:17:10 +02:00
2026-10-05 09:17:10 +02:00
2026-10-05 09:17:10 +02:00
2026-09-30 18:10:10 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-04 12:35:54 +02:00
2026-09-08 20:33:45 +02:00
2026-09-28 10:13:20 +02:00
2026-10-04 16:25:00 +02:00
2026-10-04 16:25:00 +02:00
2026-09-30 19:23:35 +02:00
2026-10-01 20:31:00 +02:00
2026-09-25 19:00:00 +02:00
2026-10-04 00:11:12 +02:00
2026-09-28 00:18:16 +02:00
2026-09-27 21:09:13 +02:00
2026-10-03 20:52:01 +02:00
2026-09-28 12:00:16 +02:00
2026-09-28 10:47:01 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-03 21:16:44 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-30 18:10:10 +02:00
2026-09-28 00:18:16 +02:00
2026-10-02 16:01:20 +02:00
2026-09-28 11:09:13 +02:00
2026-09-10 15:12:53 +02:00
2026-10-04 17:32:50 +02:00
2026-10-02 08:07:30 +02:00
2026-10-05 11:08:52 +02:00
2026-10-02 09:19:54 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 12:00:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-09 06:30:32 +02:00
2026-10-04 17:32:50 +02:00
2026-10-04 12:03:54 +02:00
2026-09-30 12:13:11 +02:00
2026-10-02 09:41:04 +02:00
2026-10-01 09:30:19 +02:00
2026-09-24 08:06:25 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 14:21:17 +02:00
2026-09-30 12:11:37 +02:00
2026-10-01 09:30:46 +02:00
2026-09-28 14:28:01 +02:00
2026-09-29 10:56:11 +02:00
2026-09-09 06:30:32 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 14:23:04 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 13:20:19 +02:00
2026-09-29 11:29:39 +02:00
2026-09-28 00:18:16 +02:00
2026-09-24 13:04:44 +02:00
2026-10-04 17:32:50 +02:00
2026-09-25 12:50:08 +02:00
2026-10-05 17:02:56 +02:00
2026-09-30 13:35:22 +02:00
2026-09-24 15:46:04 +02:00
2026-09-10 17:39:56 +02:00
2026-09-24 13:43:37 +02:00
2026-09-29 10:31:32 +02:00
2026-09-28 00:18:16 +02:00
2026-10-04 13:39:19 +02:00
2026-09-28 10:13:20 +02:00
2026-09-24 13:43:37 +02:00
2026-09-25 21:43:35 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-07 15:17:23 +02:00
2026-10-02 16:00:52 +02:00
2026-09-07 15:17:23 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 08:40:01 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-10-02 16:01:10 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 11:08:52 +02:00
2026-09-28 10:29:01 +02:00
2026-09-30 11:05:42 +02:00
2026-09-30 20:31:33 +02:00
2026-09-28 11:55:56 +02:00
2026-09-28 11:55:56 +02:00
2026-09-24 22:15:09 +02:00
2026-09-30 13:35:22 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 14:59:59 +02:00
2026-10-05 11:08:52 +02:00
2026-09-26 22:18:17 +02:00
2026-09-28 11:41:56 +02:00
2026-10-02 16:00:51 +02:00
2026-10-02 16:00:51 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 14:23:04 +02:00
2026-10-05 12:03:37 +02:00
2026-09-28 00:18:16 +02:00
2026-09-21 15:35:31 +02:00
2026-09-21 16:45:21 +02:00
2026-09-16 11:20:32 +02:00
2026-10-02 16:00:29 +02:00
2026-09-28 00:18:16 +02:00
2026-10-05 14:23:04 +02:00
2026-09-28 00:18:16 +02:00
2026-09-29 10:46:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-24 07:10:32 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-07 20:25:06 +02:00
2026-09-24 08:06:25 +02:00
2026-09-28 00:18:16 +02:00
2026-09-22 20:17:14 +02:00
2026-09-26 20:27:28 +02:00
2026-09-29 11:29:39 +02:00
2026-09-28 00:18:16 +02:00
2026-10-04 12:35:54 +02:00
2026-10-04 12:35:54 +02:00
2026-09-13 21:09:01 +02:00
2026-10-05 11:08:52 +02:00
2026-10-05 17:02:56 +02:00
2026-09-28 00:18:16 +02:00
2026-09-28 00:18:16 +02:00
2026-09-07 20:25:06 +02:00
2026-09-28 11:55:56 +02:00
2026-10-05 12:03:37 +02:00
2026-10-05 13:20:19 +02:00
2026-10-02 18:24:52 +02:00
2026-09-28 00:18:16 +02:00
2026-10-01 20:31:00 +02:00