2 commits

Author	SHA1	Message	Date
Andras Bacsai	b878dc8102	refactor(auth): enforce team member authorization across app ... Restrict sensitive operations to admins/owners and hide sensitive data from team members: - Add authorization checks to Livewire components and API endpoints - Restrict team members from accessing sensitive permissions and data - Hide environment variable values from non-admin team members - Update policies to enforce team-level admin status requirement - Add useSensitivePermissions policy for read:sensitive tokens - Improve disabled button UX with auth-specific tooltips - Add authorization checks in middleware for API tokens Closes authorization gaps in project management, server management, and settings components.	2026-02-27 11:41:01 +01:00
Andras Bacsai	86b05b902a	fix(auth): enforce authorization checks across API and Livewire components ... - Add authorization checks to API controller endpoints (view, create, update, delete) - Wrap Livewire component methods with try-catch for consistent error handling - Add AuthorizesRequests trait to components requiring authorization checks - Ensure all sensitive operations verify user permissions before execution - Implement unified error handling with handleError() helper function	2026-02-25 14:20:29 +01:00