Andras Bacsai 3c588d482d fix(access): apply API token limits in more permission checks ...

- Use the limits of the API token in more permission checks.
- Show a clearer message when a token limit blocks a change.
- Describe API tokens with limits in SECURITY.md.

2026-11-08 15:53:02 +01:00

..

ApiTokenPolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

ApplicationPolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

ApplicationPreviewPolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

ApplicationSettingPolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

CloudInitScriptPolicy.php

fix(auth): check the resource team for cloud tokens and cloud-init scripts

2026-10-06 10:29:04 +02:00

CloudProviderTokenPolicy.php

fix(auth): check the resource team for cloud tokens and cloud-init scripts

2026-10-06 10:29:04 +02:00

DatabasePolicy.php

fix(access): apply API token limits in more permission checks

2026-11-08 15:53:02 +01:00

EnvironmentPolicy.php

fix(access): hide shared variables and actions that a member cannot use

2026-10-30 15:14:02 +01:00

EnvironmentVariablePolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

GiteaAppPolicy.php

fix(gitea): only instance admins can make a Gitea source system wide

2026-10-24 18:08:14 +02:00

GithubAppPolicy.php

feat(terminal): interactive console mode for containers (docker attach) (#11538)

2026-10-14 14:32:02 +02:00

GitlabAppPolicy.php

feat(terminal): interactive console mode for containers (docker attach) (#11538)

2026-10-14 14:32:02 +02:00

InstanceSettingsPolicy.php

…

IntegrationTokenPolicy.php

fix(auth): use the resource team in database import, SQLite, and tokens

2026-10-05 21:22:33 +02:00

NotificationPolicy.php

fix(auth): enforce authorization checks across API and Livewire components

2026-02-25 14:20:29 +01:00

PrivateKeyPolicy.php

…

ProjectPolicy.php

fix(access): hide shared variables and actions that a member cannot use

2026-10-30 15:14:02 +01:00

ResourceCreatePolicy.php

fix(access): clearer credential message and backup S3 defaults

2026-11-07 22:04:44 +01:00

S3StoragePolicy.php

refactor(auth): enforce team member authorization across app

2026-02-27 11:41:01 +01:00

ScheduledTaskPolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

ServerPolicy.php

fix(access): check server and credential access for scoped members (#12488)

2026-11-07 18:59:17 +01:00

ServiceApplicationPolicy.php

Merge remote-tracking branch 'origin/next' into 9249-pr-investigation

2026-07-07 14:45:48 +02:00

ServiceDatabasePolicy.php

feat(api): add service database management endpoints

2026-07-15 12:29:58 +02:00

ServicePolicy.php

feat(access): add scoped grants for team members and API tokens (#12329)

2026-10-26 12:13:20 +01:00

SharedEnvironmentVariablePolicy.php

fix(access): apply API token limits in more permission checks

2026-11-08 15:53:02 +01:00

StandaloneDockerPolicy.php

fix(auth): enforce authorization checks across API and Livewire components

2026-02-25 14:20:29 +01:00

SwarmDockerPolicy.php

fix(auth): enforce authorization checks across API and Livewire components

2026-02-25 14:20:29 +01:00

TagPolicy.php

fix(api): secure proxy config, clone volumes, and rollback tags (#11003)

2026-07-22 14:52:11 +02:00

TeamPolicy.php

fix(access): hide shared variables and actions that a member cannot use

2026-10-30 15:14:02 +01:00