Andras Bacsai 59111e8cf3 fix(destination): scope server and network selection to current team ...

Resolve the server and network in Destination::addServer() and
::promote() through ownedByCurrentTeam() before use, authorize the
update against the resource, and pass the validated IDs into
attach()/detach()/update(). Errors are routed through handleError()
to match the sibling removeServer() method.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-22 12:53:14 +02:00

..

EnvironmentVariable

fix(env): validate Docker-compatible variable keys

2026-05-11 15:43:09 +02:00

ScheduledTask

feat(ui): add enable/disable button for scheduled task

2026-03-29 15:36:32 +05:30

Storages

refactor(volumes): validate input and escape shell args

2026-04-20 11:27:10 +02:00

ConfigurationChecker.php

fix(applications): refresh pending configuration changes

2026-05-13 10:04:17 +02:00

Danger.php

feat(livewire): add selectedActions parameter and error handling to delete methods

2026-03-11 15:04:45 +01:00

Destination.php

fix(destination): scope server and network selection to current team

2026-05-22 12:53:14 +02:00

ExecuteContainerCommand.php

fix(livewire): add Locked attributes and consolidate container name validation

2026-03-25 20:21:39 +01:00

GetLogs.php

fix: harden GetLogs Livewire component with locked properties and input validation

2026-03-28 12:28:54 +01:00

HealthChecks.php

fix(healthcheck): accept comma and semicolon in health check path validation

2026-03-28 16:31:12 +05:30

Logs.php

Squashed commit from '565g-9j4m-wqmr-cross-team-idor-logs-fix'

2026-03-10 22:11:52 +01:00

Metrics.php

Removed debug logging for metrics

2025-09-19 23:28:25 +05:30

ResourceLimits.php

fix(validation): add input validation for resource limit fields

2026-03-28 21:08:48 +05:30

ResourceOperations.php

refactor: scope destination and resource lookups by current team

2026-04-19 11:55:12 +02:00

Tags.php

feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.

2025-08-26 10:27:38 +02:00

Terminal.php

fix(livewire): add Locked attributes and consolidate container name validation

2026-03-25 20:21:39 +01:00

UploadConfig.php

Revert "rector: arrrrr"

2025-01-07 15:31:43 +01:00

Webhooks.php

feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.

2025-08-26 10:27:38 +02:00