Andras Bacsai
973632b49c
Merge remote-tracking branch 'origin/next' into audit-policies
2026-06-02 12:03:38 +02:00
Andras Bacsai
df166ac689
fix(environment): scope DeleteEnvironment lookups to current team
...
Scope DeleteEnvironment::mount() and delete() lookups through
Environment::ownedByCurrentTeam() so an environment_id that belongs to
another team resolves to a 404 instead of loading the foreign record.
Mark $environment_id as #[Locked] so the public Livewire property can no
longer be reassigned from the client.
Add tests/Feature/DeleteEnvironmentTeamScopingTest.php covering mount,
delete, the #[Locked] guard, and the team-scoped helper for both the
cross-team and own-team cases.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-22 12:37:48 +02:00
Andras Bacsai
86b05b902a
fix(auth): enforce authorization checks across API and Livewire components
...
- Add authorization checks to API controller endpoints (view, create, update, delete)
- Wrap Livewire component methods with try-catch for consistent error handling
- Add AuthorizesRequests trait to components requiring authorization checks
- Ensure all sensitive operations verify user permissions before execution
- Implement unified error handling with handleError() helper function
2026-02-25 14:20:29 +01:00
Andras Bacsai
ef1abe17b8
refactor(redirect): replace redirect calls with redirectRoute helper for consistency
2025-12-26 13:29:59 +01:00
Andras Bacsai
ae1b0de561
feat(auth): enhance authorization checks in Livewire components for resource management
2025-08-26 10:27:38 +02:00
Andras Bacsai
a9832e2783
Merge pull request #3949 from peaklabs-dev/fix-project-deletion
...
Fix: Projects can be deleted with resources
2024-11-07 13:43:56 +01:00
peaklabs-dev
e52139f436
chore better error message when deleting an environment
2024-10-18 13:49:17 +02:00
Andras Bacsai
513c74a7e3
Refactor BaseComponent to remove unused code and initialize route parameters in the boot method
2024-10-17 22:00:27 +02:00
ayntk-ai
dfd218ec06
fixes here and there
2024-09-02 19:27:21 +02:00
ayntk-ai
830c047ccf
delete environment confirmation
2024-08-31 15:06:07 +02:00
ayntk-ai
9136d7acdc
WIP more delete confirmations
2024-08-30 20:00:04 +02:00
Thijmen
d86274cc37
Fix styling
2024-06-10 20:43:34 +00:00
Andras Bacsai
8ff7aeb78b
ui: new modal component
2024-01-31 14:18:59 +01:00
Andras Bacsai
f03aa57758
fix: routing, switch back to old one
2023-12-27 16:45:01 +01:00
Andras Bacsai
f934dfef33
wip livewire migration
2023-12-07 22:56:55 +01:00
Andras Bacsai
718603e37e
wip: migrate to livewire 3
2023-12-07 19:06:32 +01:00