Andras Bacsai 105584da06 fix(auth): check the resource team for cloud tokens and cloud-init scripts ...

The policies checked the admin role in the session team. A user who was
demoted in the owning team could still edit its cloud tokens and
cloud-init scripts after switching to a team they administer. View,
update and delete now need admin of the resource's team, as for
integration tokens.

2026-10-06 10:29:04 +02:00

..

ApiSensitiveFieldsTest.php

…

ApiTokenCreationSecurityTest.php

…

AuditLogTest.php

feat(audit): log account, resource, and instance settings changes

2026-10-04 17:32:50 +02:00

CaCertificateCommandInjectionTest.php

…

CloudInitScriptsTest.php

…

CloudProviderTokenFormTest.php

…

CloudProviderTokenShowTest.php

…

CloudResourcePolicyResourceTeamTest.php

fix(auth): check the resource team for cloud tokens and cloud-init scripts

2026-10-06 10:29:04 +02:00

CmdHealthCheckValidationTest.php

…

CommandInjectionSecurityTest.php

…

GithubAppSetupCallbackTest.php

…

IntegrationTokenFormAuthorizationTest.php

…

IntegrationTokenFormTest.php

…

IntegrationTokenSecretProvidersTest.php

…

IpAllowlistTest.php

…

PrivateKeyDropdownTest.php

…

SecurityResourceAuditTeamTest.php

fix(audit): log security resource changes under the resource team

2026-10-06 10:29:04 +02:00