fix(api): require deploy ability for registry check and logout

Align the registry check and logout endpoints with the registry login endpoint.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

app/Http/Controllers/Api/ServerDockerRegistriesController.php

@@ -231,7 +231,7 @@ class ServerDockerRegistriesController extends Controller
 
     #[OA\Post(
         summary: 'Check a registry login on a server',
-        description: 'Check that the saved login of the server for a registry still works. Runs docker login with the saved credentials on the server.',
+        description: 'Check that the saved login of the server for a registry still works. Runs docker login with the saved credentials on the server. Needs a token with the write and deploy permissions.',
         path: '/servers/{uuid}/registries/{registry}/check',
         operationId: 'check-server-registry-login',
         security: [['bearerAuth' => []]],
@@ -268,7 +268,7 @@ class ServerDockerRegistriesController extends Controller
 
     #[OA\Delete(
         summary: 'Log out from a registry on a server',
-        description: 'Run docker logout on the server for a registry.',
+        description: 'Run docker logout on the server for a registry. Needs a token with the write and deploy permissions.',
         path: '/servers/{uuid}/registries/{registry}',
         operationId: 'logout-server-registry',
         security: [['bearerAuth' => []]],

openapi.json

@@ -17000,7 +17000,7 @@
                     "Servers"
                 ],
                 "summary": "Check a registry login on a server",
-                "description": "Check that the saved login of the server for a registry still works. Runs docker login with the saved credentials on the server.",
+                "description": "Check that the saved login of the server for a registry still works. Runs docker login with the saved credentials on the server. Needs a token with the write and deploy permissions.",
                 "operationId": "check-server-registry-login",
                 "parameters": [
                     {
@@ -17065,7 +17065,7 @@
                     "Servers"
                 ],
                 "summary": "Log out from a registry on a server",
-                "description": "Run docker logout on the server for a registry.",
+                "description": "Run docker logout on the server for a registry. Needs a token with the write and deploy permissions.",
                 "operationId": "logout-server-registry",
                 "parameters": [
                     {

openapi.yaml

@@ -10824,7 +10824,7 @@ paths:
       tags:
         - Servers
       summary: 'Check a registry login on a server'
-      description: 'Check that the saved login of the server for a registry still works. Runs docker login with the saved credentials on the server.'
+      description: 'Check that the saved login of the server for a registry still works. Runs docker login with the saved credentials on the server. Needs a token with the write and deploy permissions.'
       operationId: check-server-registry-login
       parameters:
         -
@@ -10866,7 +10866,7 @@ paths:
       tags:
         - Servers
       summary: 'Log out from a registry on a server'
-      description: 'Run docker logout on the server for a registry.'
+      description: 'Run docker logout on the server for a registry. Needs a token with the write and deploy permissions.'
       operationId: logout-server-registry
       parameters:
         -

routes/api.php

@@ -194,8 +194,8 @@ Route::group([
 
     Route::get('/servers/{uuid}/registries', [ServerDockerRegistriesController::class, 'index'])->middleware(['api.ability:read:sensitive']);
     Route::post('/servers/{uuid}/registries', [ServerDockerRegistriesController::class, 'login'])->middleware(['api.ability:write', 'api.ability:deploy']);
-    Route::post('/servers/{uuid}/registries/{registry}/check', [ServerDockerRegistriesController::class, 'check'])->middleware(['api.ability:write']);
-    Route::delete('/servers/{uuid}/registries/{registry}', [ServerDockerRegistriesController::class, 'logout'])->middleware(['api.ability:write']);
+    Route::post('/servers/{uuid}/registries/{registry}/check', [ServerDockerRegistriesController::class, 'check'])->middleware(['api.ability:write', 'api.ability:deploy']);
+    Route::delete('/servers/{uuid}/registries/{registry}', [ServerDockerRegistriesController::class, 'logout'])->middleware(['api.ability:write', 'api.ability:deploy']);
 
     Route::get('/servers/{uuid}/proxy', [ServerProxyController::class, 'show'])->middleware(['api.ability:read']);
     Route::patch('/servers/{uuid}/proxy', [ServerProxyController::class, 'update'])->middleware(['api.ability:write']);