Andras Bacsai 7fe40f4cf6 fix(api): require deploy ability for server side effects ...

Require deploy permission for API changes that trigger server side effects, including resource deletion, storage access, provider operations, and database imports. Also escape Docker cleanup filters and sanitize log drain server names.

2026-10-19 09:07:42 +02:00

..

Concerns

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ApplicationPreviewsController.php

fix(api): limit pull request ids to the database integer range

2026-10-05 21:24:05 +02:00

ApplicationsController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ApplicationSecretManagerController.php

feat(secrets): add integration token and application manager APIs

2026-08-23 20:42:20 +02:00

AuditEventsController.php

docs(api): document audit events and fix the private key update path

2026-10-05 21:24:20 +02:00

CloudInitScriptsController.php

…

CloudProviderTokensController.php

…

DatabasesController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

DeployController.php

fix(deployments): scope deployment queries to team applications (#12195)

2026-10-18 23:32:14 +02:00

DestinationsController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

DigitalOceanController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

GithubController.php

fix(sources): restrict system-wide Git sources to instance admins (#12164)

2026-10-14 14:07:54 +02:00

GitlabController.php

fix(sources): restrict system-wide Git sources to instance admins (#12164)

2026-10-14 14:07:54 +02:00

HetznerController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

InstanceEmailSettingsController.php

feat(api): add instance email settings endpoints

2026-08-19 11:57:26 +02:00

IntegrationTokensController.php

feat(secrets): resolve integrations across deployments and databases

2026-08-23 21:33:00 +02:00

NotificationsController.php

fix(applications): persist restart limit state for stopped containers (#11566)

2026-08-31 13:13:26 +02:00

OpenApi.php

fix(database): skip MySQL system databases when restoring all databases

2026-09-30 18:59:49 +02:00

OtherController.php

fix(help): show an error when feedback cannot be delivered

2026-09-29 10:19:57 +02:00

ProjectController.php

perf(databases): load Redis-family passwords once for database lists

2026-10-06 06:59:22 +02:00

ResourcesController.php

…

S3StoragesController.php

…

ScheduledTasksController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

SecurityController.php

docs(api): document audit events and fix the private key update path

2026-10-05 21:24:20 +02:00

SentinelController.php

fix(sentinel): refresh UI on container health and status changes

2026-10-04 16:25:00 +02:00

ServerCloudflareTunnelController.php

…

ServerDockerCleanupController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServerDockerRegistriesController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServerLogDrainsController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServerProxyController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServersController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServerSentinelController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServerTransferController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServiceApplicationsController.php

feat(proxy): override the Traefik certificate resolver per resource

2026-10-11 19:01:27 +02:00

ServiceDatabasesController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

ServicesController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

SharedEnvironmentVariablesController.php

chore: align control-plane behavior

2026-09-24 15:46:04 +02:00

TagsController.php

…

TeamController.php

fix(api): return JSON validation errors and reject unknown fields on PATCH /team

2026-10-02 16:01:00 +02:00

VolumeBackupsController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00

VultrController.php

fix(api): require deploy ability for server side effects

2026-10-19 09:07:42 +02:00