7 Commits

Include renames

Author	SHA1	Message	Date
3 people	cdc45e5736	fix: merge fixes-next into next (security hardening and fixes) (#12460) ... Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Co-authored-by: peaklabs-dev <122374094+peaklabs-dev@users.noreply.github.com>	2026-11-06 10:18:19 +01:00
peaklabs-dev	32574d76b1	Merge remote-tracking branch 'origin/main' into next	2026-11-02 16:12:51 +01:00
Andras BacsaiandClaude Opus 5.5	6c650dd127	fix(api): document request bodies for shared env create and update endpoints ... Closes #12395 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-02 14:33:29 +01:00
Andras Bacsai	6f1905b7b0	fix(access): enforce member grants on more actions ... - Require write access on the target environment to clone or move a resource - Check read access on shared variables before a reference is added or resolved - Limit team credentials, git sources, and imports of other backups to team-wide writers - Require the delete level for backup, volume, storage, and task deletes - Require create access for previews, new projects, and git sources - Use the token team for the access scope, and check team-wide access on Livewire updates - Require instance admin to toggle the API and MCP server - Hide server pickers and broadcast details from members without access	2026-10-30 16:11:10 +01:00
Andras Bacsai	2796609e96	feat(access): add scoped grants for team members and API tokens (#12329)	2026-10-26 12:13:20 +01:00
Andras Bacsai	87685d1e09	chore: align control-plane behavior	2026-09-24 15:46:04 +02:00
Andras Bacsai	e560bdf9e0	fix(api): secure proxy config, clone volumes, and rollback tags (#11003)	2026-07-22 14:52:11 +02:00