Andras Bacsai ac5a0c289f fix(api): require the deploy ability for database imports from a server path ...

An import with source=server reads a file at an absolute path on the
server, but it needed only the write ability.

- Return 403 without the deploy or root ability, the same as other host
  paths outside the resource directory

2026-10-05 21:23:43 +02:00

..

Controllers

fix(api): require the deploy ability for database imports from a server path

2026-10-05 21:23:43 +02:00

Middleware

fix(auth): let OAuth-only users enable 2FA without a password confirmation

2026-10-02 16:01:10 +02:00

Kernel.php

fix(auth): let OAuth-only users enable 2FA without a password confirmation

2026-10-02 16:01:10 +02:00