Andras BacsaiandClaude Opus 5.5 d8d33c69ce fix(auth): hide locked and admin-only secrets in forms, compose, and the API ...

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 21:46:58 +02:00

..

ApiTokenPolicy.php

fix(api-tokens): scope token access to current team (#11396)

2026-08-19 11:27:23 +02:00

ApplicationPolicy.php

refactor(policies): remove unused authorization methods (#12165)

2026-10-14 10:18:05 +02:00

ApplicationPreviewPolicy.php

refactor(policies): remove unused authorization methods (#12165)

2026-10-14 10:18:05 +02:00

ApplicationSettingPolicy.php

…

CloudInitScriptPolicy.php

fix(auth): check the resource team for cloud tokens and cloud-init scripts

2026-10-06 10:29:04 +02:00

CloudProviderTokenPolicy.php

fix(auth): check the resource team for cloud tokens and cloud-init scripts

2026-10-06 10:29:04 +02:00

DatabasePolicy.php

…

EnvironmentPolicy.php

…

EnvironmentVariablePolicy.php

…

GiteaAppPolicy.php

fix(gitea): only instance admins can make a Gitea source system wide

2026-10-24 18:08:14 +02:00

GithubAppPolicy.php

fix(sources): restrict system-wide Git sources to instance admins (#12164)

2026-10-14 14:07:54 +02:00

GitlabAppPolicy.php

fix(sources): restrict system-wide Git sources to instance admins (#12164)

2026-10-14 14:07:54 +02:00

InstanceSettingsPolicy.php

…

IntegrationTokenPolicy.php

fix(auth): use the resource team in database import, SQLite, and tokens

2026-10-05 21:22:33 +02:00

NotificationPolicy.php

…

PrivateKeyPolicy.php

…

ProjectPolicy.php

…

ResourceCreatePolicy.php

refactor(policies): remove unused authorization methods (#12165)

2026-10-14 10:18:05 +02:00

S3StoragePolicy.php

…

ScheduledTaskPolicy.php

fix(security): enforce team-scoped authorization for scheduled tasks (#11239)

2026-08-18 16:01:17 +02:00

ServerPolicy.php

fix(auth): hide locked and admin-only secrets in forms, compose, and the API

2026-10-24 21:46:58 +02:00

ServiceApplicationPolicy.php

…

ServiceDatabasePolicy.php

…

ServicePolicy.php

refactor(policies): remove unused authorization methods (#12165)

2026-10-14 10:18:05 +02:00

SharedEnvironmentVariablePolicy.php

…

StandaloneDockerPolicy.php

…

SwarmDockerPolicy.php

…

TagPolicy.php

fix(api): secure proxy config, clone volumes, and rollback tags (#11003)

2026-07-22 14:52:11 +02:00

TeamPolicy.php

fix(teams): restrict deletion to owners and backfill team ownership

2026-08-20 09:32:32 +02:00