coolify/app/Livewire
Andras Bacsai b878dc8102 refactor(auth): enforce team member authorization across app
Restrict sensitive operations to admins/owners and hide sensitive data
from team members:
- Add authorization checks to Livewire components and API endpoints
- Restrict team members from accessing sensitive permissions and data
- Hide environment variable values from non-admin team members
- Update policies to enforce team-level admin status requirement
- Add useSensitivePermissions policy for read:sensitive tokens
- Improve disabled button UX with auth-specific tooltips
- Add authorization checks in middleware for API tokens

Closes authorization gaps in project management, server management,
and settings components.
2026-02-27 11:41:01 +01:00
..
Admin Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00
Boarding refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Destination fix(auth): enforce authorization checks in Livewire components 2026-02-25 16:38:04 +01:00
Notifications feat(proxy): add Traefik version tracking with notifications and dismissible UI warnings 2025-11-18 14:53:49 +01:00
Profile fix(user): ensure email attributes are stored in lowercase for consistency and prevent case-related issues 2025-09-05 17:44:34 +02:00
Project refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Security refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Server refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Settings refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
SharedVariables refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Source/Github refactor(redirect): replace redirect calls with redirectRoute helper for consistency 2025-12-26 13:29:59 +01:00
Storage fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
Subscription feat(changelog): implement automated changelog fetching from GitHub and enhance changelog read tracking 2025-08-12 10:07:11 +02:00
Tags refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Team refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
Terminal feat: replace terminal dropdown with searchable datalist component 2025-10-12 14:57:45 +02:00
ActivityMonitor.php fix(user): complete User model fixes for non-web contexts 2025-12-28 13:55:55 +01:00
Dashboard.php refactor: replace queries with cached versions for performance improvements 2025-12-08 13:39:33 +01:00
DeploymentsIndicator.php Refactor deployment indicator to use server-side route detection 2025-12-11 09:39:56 +01:00
ForcePasswordReset.php Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00
GlobalSearch.php chore: prepare for PR 2026-02-18 11:20:32 +01:00
Help.php fix(feedback): update feedback email address to improve communication with users 2025-09-11 20:23:07 +02:00
LayoutPopups.php Fix styling 2024-06-10 20:43:34 +00:00
MonacoEditor.php Merge branch 'next' into andrasbacsai/livewire-model-binding 2025-10-16 11:05:29 +02:00
NavbarDeleteTeam.php fix(auth): enforce authorization checks in Livewire components 2026-02-25 16:38:04 +01:00
SettingsBackup.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
SettingsDropdown.php feat(ui): display current version in settings dropdown and update UI accordingly 2025-09-01 16:23:14 +02:00
SettingsEmail.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
SettingsOauth.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
SwitchTeam.php fix(ui): always redirect to dashboard after team switch 2025-02-03 21:38:40 +01:00
Upgrade.php Widen upgrade popup and add dev mode simulation 2025-12-17 10:59:38 +01:00
VerifyEmail.php Revert "rector: arrrrr" 2025-01-07 15:31:43 +01:00