tiennm99/coolify
1
0
Fork 0
mirror of https://github.com/tiennm99/coolify.git synced 2026-06-24 07:36:14 +00:00
Code Issues Packages Projects Releases Wiki Activity
15,167 Commits 2 Branches 0 Tags
7542c71dc45f0e2fdcf2a02304a3911d1dff7570
Commit Graph

3 Commits

Author SHA1 Message Date
Andras Bacsai 7542c71dc4 Merge remote-tracking branch 'origin/next' into 2731-investigate-failed-git-clone 2026-04-03 09:05:13 +02:00
Andras Bacsai 3ba4553df5 fix(security): enforce team-scoped project/env lookups in onboarding 
Use firstOrFail() for team-scoped project and environment lookups across
new-project Livewire flows so missing or cross-team UUIDs fail closed.
Also dispatch an error when boarding selects a non-owned project, and
update IDOR feature tests for the new error/exception behavior.
 2026-03-29 15:55:03 +02:00
Andras Bacsai e36622fdfb refactor: scope server and project queries to current team 
Ensure Server and Project lookups in Livewire components and API
controllers use team-scoped queries (ownedByCurrentTeam / whereTeamId)
instead of unscoped find/where calls. This enforces consistent
multi-tenant isolation across all user-facing code paths.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-28 12:29:08 +01:00