coolify

mirror of https://github.com/coollabsio/coolify.git synced 2026-11-06 13:10:37 -04:00

Files

T

Andras Bacsai 0798f84c2c fix(auth): protect the root user and owners from deletion by admins

An admin of the root team could delete the root user (id 0) and the
owners of the root team from the user list.

- Never delete the root user here
- Refuse a user whose root-team role is higher than the caller's
- Refuse the caller's own account; the profile has its own flow

2026-10-05 23:42:01 +02:00

Member

feat(ui): show two-factor status of team members (#11186 )

2026-08-11 21:10:55 +02:00

AdminView.php

fix(auth): protect the root user and owners from deletion by admins

2026-10-05 23:42:01 +02:00

AuditLog.php

fix(audit): return 403 on the audit log without a session team

2026-10-05 21:23:36 +02:00

Create.php

fix(teams): restrict deletion to owners and backfill team ownership