7 commits

Author	SHA1	Message	Date
Andras Bacsai	6a5fd40a5c	refactor(policies): add uploadBackup ability and enforce it on backup upload endpoint ... Introduce a dedicated `uploadBackup` ability on Application, Database, Service, and ServiceDatabase policies (admin/owner only) and call `$this->authorize('uploadBackup', $resource)` in `UploadController::upload` so the backup-upload endpoint goes through the same policy layer as the rest of the authorization refactor. Adds Pest coverage for each policy variant plus HTTP-level checks. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-04-20 11:51:35 +02:00
Andras Bacsai	86b05b902a	fix(auth): enforce authorization checks across API and Livewire components ... - Add authorization checks to API controller endpoints (view, create, update, delete) - Wrap Livewire component methods with try-catch for consistent error handling - Add AuthorizesRequests trait to components requiring authorization checks - Ensure all sensitive operations verify user permissions before execution - Implement unified error handling with handleError() helper function	2026-02-25 14:20:29 +01:00
Andras Bacsai	63fcc0ebc3	feat(acl): Change views/backend code to able to use proper ACL's later on. Currently it is not enabled.	2025-08-26 10:27:38 +02:00
Andras Bacsai	3e1f47a243	feat(auth): introduce resource creation authorization middleware and policies for enhanced access control	2025-08-26 10:27:38 +02:00
Andras Bacsai	40f108d6e1	feat(auth): implement authorization checks for application management	2025-08-22 16:47:59 +02:00
Thijmen	d86274cc37	Fix styling	2024-06-10 20:43:34 +00:00
Andras Bacsai	b3800fc42e	init policies	2024-05-24 14:15:16 +02:00