mirror of
https://github.com/coollabsio/coolify.git
synced 2026-03-11 08:55:47 +00:00
b878dc8102
Restrict sensitive operations to admins/owners and hide sensitive data from team members: - Add authorization checks to Livewire components and API endpoints - Restrict team members from accessing sensitive permissions and data - Hide environment variable values from non-admin team members - Update policies to enforce team-level admin status requirement - Add useSensitivePermissions policy for read:sensitive tokens - Improve disabled button UX with auth-specific tooltips - Add authorization checks in middleware for API tokens Closes authorization gaps in project management, server management, and settings components.
45 lines
1.2 KiB
PHP
45 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\View\Components\Forms;
|
|
|
|
use Closure;
|
|
use Illuminate\Contracts\View\View;
|
|
use Illuminate\Support\Facades\Gate;
|
|
use Illuminate\View\Component;
|
|
|
|
class Button extends Component
|
|
{
|
|
/**
|
|
* Create a new component instance.
|
|
*/
|
|
public function __construct(
|
|
public bool $disabled = false,
|
|
public bool $authDisabled = false,
|
|
public bool $noStyle = false,
|
|
public ?string $modalId = null,
|
|
public string $defaultClass = 'button',
|
|
public bool $showLoadingIndicator = true,
|
|
public ?string $canGate = null,
|
|
public mixed $canResource = null,
|
|
public bool $autoDisable = true,
|
|
) {
|
|
// Handle authorization-based disabling
|
|
if ($this->canGate && $this->canResource && $this->autoDisable) {
|
|
$hasPermission = Gate::allows($this->canGate, $this->canResource);
|
|
|
|
if (! $hasPermission) {
|
|
$this->disabled = true;
|
|
$this->authDisabled = true;
|
|
}
|
|
}
|
|
|
|
if ($this->noStyle) {
|
|
$this->defaultClass = '';
|
|
}
|
|
}
|
|
|
|
public function render(): View|Closure|string
|
|
{
|
|
return view('components.forms.button');
|
|
}
|
|
}
|