Andras Bacsai c70463fb9f fix(env): hide hardcoded compose values from users who cannot edit ...

Hardcoded variables parsed from docker-compose are now redacted in the
environment variable list unless the user can update the resource. The
value is nulled server-side and flagged with is_value_hidden, so it no
longer reaches the Livewire snapshot or rendered HTML.

ShowHardcoded gets a locked isValueHidden property. When it is set, the
copy button is hidden and the details modal shows "Hidden (only admins
can view)" in place of the value. Previously the view checked member
role only.

Add tests covering redaction for members and visibility for owners.

2026-09-30 11:31:29 +02:00

..

ApiAuthorizationTest.php

…

ApiTokenPermissionTest.php

…

ApplicationConfigAuthorizationTest.php

…

CanUpdateResourceMiddlewareTest.php

…

CloudProviderAuthorizationTest.php

…

ComposeContentVisibilityTest.php

…

DashboardAuthorizationTest.php

…

DatabaseConfigAuthorizationTest.php

…

DatabaseCredentialVisibilityTest.php

…

DeployKeyApplicationCreationAuthorizationTest.php

…

DestinationOwnershipTest.php

…

EnvironmentVariableValueHidingTest.php

…

FileMountContentVisibilityTest.php

…

LegacyMemberTokenTest.php

…

LivewireStoredSecretAuthorizationTest.php

…

NavbarDeleteTeamAuthorizationTest.php

…

NotificationAuthorizationTest.php

…

ProjectEnvironmentAuthorizationTest.php

…

ResourceCreationAuthorizationTest.php

…

ResourceHeadingAuthorizationTest.php

…

ResourceOperationsCrossTenantTest.php

…

ScheduledTaskSyncAuthorizationTest.php

…

SecurityAuthorizationTest.php

…

SecurityPageAuthorizationTest.php

…

ServerAuthorizationTest.php

…

ServiceConfigAuthorizationTest.php

…

SharedResourceAuthorizationTest.php

…

TaskAndLogOutputVisibilityTest.php

…

TeamAuthorizationTest.php

…

UploadBackupAuthorizationTest.php

…