Andras Bacsai 6f1905b7b0 fix(access): enforce member grants on more actions ...

- Require write access on the target environment to clone or move a resource
- Check read access on shared variables before a reference is added or resolved
- Limit team credentials, git sources, and imports of other backups to team-wide writers
- Require the delete level for backup, volume, storage, and task deletes
- Require create access for previews, new projects, and git sources
- Use the token team for the access scope, and check team-wide access on Livewire updates
- Require instance admin to toggle the API and MCP server
- Hide server pickers and broadcast details from members without access

2026-10-30 16:11:10 +01:00

..

Environment

fix(access): hide shared variables and actions that a member cannot use

2026-10-30 15:14:02 +01:00

Project

fix(access): hide shared variables and actions that a member cannot use

2026-10-30 15:14:02 +01:00

Server

fix(access): enforce member grants on more actions

2026-10-30 16:11:10 +01:00

Team

fix(access): enforce member grants on more actions

2026-10-30 16:11:10 +01:00

Canvas.php

fix(access): hide shared variables and actions that a member cannot use

2026-10-30 15:14:02 +01:00

Index.php

feat(dashboard): add canvas view with active deployment overlay

2026-10-14 23:55:28 +02:00