Andras Bacsai 062ad57740 fix(security): enforce team access on mutable actions ...

Authorize cloud provider token access, audit sensitive operations, and
standardize public IDs across deployment and resource flows.

2026-06-04 11:03:06 +02:00

..

Application.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

ApplicationDeploymentQueue.php

feat(ui): improve configuration changes modal

2026-05-30 13:16:37 +05:30

ApplicationPreview.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

ApplicationSetting.php

feat(applications): add configurable stop grace period

2026-05-11 23:43:53 +02:00

BaseModel.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

CloudInitScript.php

…

CloudProviderToken.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

DiscordNotificationSettings.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

DockerCleanupExecution.php

feat(deployments): support Docker image tags for preview deployments

2026-03-30 13:35:35 +02:00

EmailNotificationSettings.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

Environment.php

Merge remote-tracking branch 'origin/next' into pr-7764-shadow/add-shared-server-env

2026-03-31 13:51:06 +02:00

EnvironmentVariable.php

fix(railpack): fail fast when buildx is unavailable

2026-05-11 17:31:29 +02:00

GithubApp.php

Fix source selection flow

2026-05-22 13:00:53 +02:00

GitlabApp.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

InstanceSettings.php

feat(mcp): add MCP server with read-only tools for Coolify resources

2026-04-29 10:30:43 +02:00

LocalFileVolume.php

fix(service): block UI editing of file volumes exceeding 5 MiB

2026-04-28 22:36:56 +02:00

LocalPersistentVolume.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

OauthSetting.php

…

PersonalAccessToken.php

fix(api-tokens): persist expiration warning state

2026-05-13 10:11:40 +02:00

PrivateKey.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

Project.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

ProjectSetting.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

PushoverNotificationSettings.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

S3Storage.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-06-02 12:03:38 +02:00

ScheduledDatabaseBackup.php

fix(backups): enforce retention and clean up stale executions

2026-04-03 11:33:21 +02:00

ScheduledDatabaseBackupExecution.php

fix(backups): validate S3 storage before backup scheduling

2026-05-23 13:06:36 +02:00

ScheduledTask.php

refactor(scheduled-task): simplify server() with nullsafe operators and add return type

2026-05-04 12:26:15 +02:00

ScheduledTaskExecution.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

Server.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

ServerSetting.php

feat(sentinel): embed server UUID in encrypted sentinel token

2026-04-30 08:21:30 +02:00

Service.php

fix(security): enforce team access on mutable actions

2026-06-04 11:03:06 +02:00

ServiceApplication.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

ServiceDatabase.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

SharedEnvironmentVariable.php

fix(env): validate Docker-compatible variable keys

2026-05-11 15:43:09 +02:00

SlackNotificationSettings.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

SslCertificate.php

…

StandaloneClickhouse.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandaloneDocker.php

feat(destinations): split Docker resources into separate page

2026-06-03 11:24:36 +02:00

StandaloneDragonfly.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandaloneKeydb.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandaloneMariadb.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandaloneMongodb.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandaloneMysql.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandalonePostgresql.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

StandaloneRedis.php

fix(database): honor disabled standalone health checks

2026-06-01 08:55:03 +02:00

Subscription.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

SwarmDocker.php

refactor: scope destination and resource lookups by current team

2026-04-19 11:55:12 +02:00

Tag.php

fix(models): replace forceFill/forceCreate with fill/create and add fillable guards

2026-03-31 13:45:31 +02:00

Team.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-06-02 12:03:38 +02:00

TeamInvitation.php

…

TelegramNotificationSettings.php

refactor: define explicit fillable attributes on all Eloquent models

2026-03-29 21:25:41 +02:00

User.php

Merge remote-tracking branch 'origin/next' into audit-policies

2026-06-02 12:03:38 +02:00

UserChangelogRead.php

…

WebhookNotificationSettings.php

…