mirror of
https://github.com/coollabsio/coolify.git
synced 2026-03-11 08:55:47 +00:00
b878dc8102
Restrict sensitive operations to admins/owners and hide sensitive data from team members: - Add authorization checks to Livewire components and API endpoints - Restrict team members from accessing sensitive permissions and data - Hide environment variable values from non-admin team members - Update policies to enforce team-level admin status requirement - Add useSensitivePermissions policy for read:sensitive tokens - Improve disabled button UX with auth-specific tooltips - Add authorization checks in middleware for API tokens Closes authorization gaps in project management, server management, and settings components.
100 lines
3.2 KiB
PHP
100 lines
3.2 KiB
PHP
<?php
|
|
|
|
namespace App\Livewire\Server;
|
|
|
|
use App\Jobs\ConnectProxyToNetworksJob;
|
|
use App\Models\Server;
|
|
use App\Models\StandaloneDocker;
|
|
use App\Models\SwarmDocker;
|
|
use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
|
|
use Illuminate\Support\Collection;
|
|
use Livewire\Component;
|
|
|
|
class Destinations extends Component
|
|
{
|
|
use AuthorizesRequests;
|
|
|
|
public Server $server;
|
|
|
|
public Collection $networks;
|
|
|
|
public function mount(string $server_uuid)
|
|
{
|
|
try {
|
|
$this->networks = collect();
|
|
$this->server = Server::ownedByCurrentTeam()->whereUuid($server_uuid)->firstOrFail();
|
|
} catch (\Throwable $e) {
|
|
return handleError($e, $this);
|
|
}
|
|
}
|
|
|
|
private function createNetworkAndAttachToProxy()
|
|
{
|
|
ConnectProxyToNetworksJob::dispatchSync($this->server);
|
|
}
|
|
|
|
public function add($name)
|
|
{
|
|
if ($this->server->isSwarm()) {
|
|
$this->authorize('create', SwarmDocker::class);
|
|
$found = $this->server->swarmDockers()->where('network', $name)->first();
|
|
if ($found) {
|
|
$this->dispatch('error', 'Network already added to this server.');
|
|
|
|
return;
|
|
} else {
|
|
SwarmDocker::create([
|
|
'name' => $this->server->name.'-'.$name,
|
|
'network' => $this->name,
|
|
'server_id' => $this->server->id,
|
|
]);
|
|
}
|
|
} else {
|
|
$this->authorize('create', StandaloneDocker::class);
|
|
$found = $this->server->standaloneDockers()->where('network', $name)->first();
|
|
if ($found) {
|
|
$this->dispatch('error', 'Network already added to this server.');
|
|
|
|
return;
|
|
} else {
|
|
StandaloneDocker::create([
|
|
'name' => $this->server->name.'-'.$name,
|
|
'network' => $name,
|
|
'server_id' => $this->server->id,
|
|
]);
|
|
}
|
|
$this->createNetworkAndAttachToProxy();
|
|
}
|
|
}
|
|
|
|
public function scan()
|
|
{
|
|
try {
|
|
$this->authorize('update', $this->server);
|
|
} catch (\Throwable $e) {
|
|
return handleError($e, $this);
|
|
}
|
|
if ($this->server->isSwarm()) {
|
|
$alreadyAddedNetworks = $this->server->swarmDockers;
|
|
} else {
|
|
$alreadyAddedNetworks = $this->server->standaloneDockers;
|
|
}
|
|
$networks = instant_remote_process(['docker network ls --format "{{json .}}"'], $this->server, false);
|
|
$this->networks = format_docker_command_output_to_json($networks)->filter(function ($network) {
|
|
return $network['Name'] !== 'bridge' && $network['Name'] !== 'host' && $network['Name'] !== 'none';
|
|
})->filter(function ($network) use ($alreadyAddedNetworks) {
|
|
return ! $alreadyAddedNetworks->contains('network', $network['Name']);
|
|
});
|
|
if ($this->networks->count() === 0) {
|
|
$this->dispatch('success', 'No new destinations found on this server.');
|
|
|
|
return;
|
|
}
|
|
$this->dispatch('success', 'Scan done.');
|
|
}
|
|
|
|
public function render()
|
|
{
|
|
return view('livewire.server.destinations');
|
|
}
|
|
}
|