6 commits

Author	SHA1	Message	Date
Andras Bacsai	b878dc8102	refactor(auth): enforce team member authorization across app ... Restrict sensitive operations to admins/owners and hide sensitive data from team members: - Add authorization checks to Livewire components and API endpoints - Restrict team members from accessing sensitive permissions and data - Hide environment variable values from non-admin team members - Update policies to enforce team-level admin status requirement - Add useSensitivePermissions policy for read:sensitive tokens - Improve disabled button UX with auth-specific tooltips - Add authorization checks in middleware for API tokens Closes authorization gaps in project management, server management, and settings components.	2026-02-27 11:41:01 +01:00
Andras Bacsai	63fcc0ebc3	feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.	2025-08-26 10:27:38 +02:00
Andras Bacsai	b5fe5dd909	feat(auth): refine authorization checks for S3 storage and service management	2025-08-23 18:50:50 +02:00
Andras Bacsai	103a9c2df2	fix(policy): update delete method to check for admin status in S3StoragePolicy	2025-08-12 10:06:19 +02:00
Andras Bacsai	ea115e6d31	refactor(policy): optimize team membership checks in S3StoragePolicy	2025-07-03 15:52:26 +02:00
Andras Bacsai	90817914d9	refactor(ui): separate views for instance settings to separate paths to make it cleaner	2025-06-30 08:50:17 +02:00