Andras Bacsai 6f557cf17f fix(security): enforce GitLab App authorization parity with GitHub ... GitlabAppPolicy previously allowed any authenticated user to update, delete, and create GitLab sources. Align it with GithubAppPolicy, require Application create authorization on the private-repo wizard, and reject OAuth callbacks from non-admins so members cannot escalate privileges.		2026-07-20 23:21:40 +02:00
..
ApiTokenPolicyTest.php	refactor(auth): enforce team member authorization across app	2026-02-27 11:41:01 +01:00
ApplicationPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ApplicationPreviewPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ApplicationSettingPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
DatabasePolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
EnvironmentPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
EnvironmentVariablePolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
GithubAppPolicyTest.php	test(browser): cover resource settings persistence	2026-02-25 19:26:55 +01:00
GitlabAppPolicyTest.php	fix(security): enforce GitLab App authorization parity with GitHub	2026-07-20 23:21:40 +02:00
NotificationPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
PrivateKeyPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ProjectPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ResourceCreatePolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
S3StoragePolicyTest.php	refactor(auth): enforce team member authorization across app	2026-02-27 11:41:01 +01:00
ServerPolicyTest.php	fix(auth): restrict Sentinel access and register S3 policy	2026-06-15 12:31:30 +02:00
ServiceApplicationPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ServiceDatabasePolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
ServicePolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
SharedEnvironmentVariablePolicyTest.php	test(browser): cover resource settings persistence	2026-02-25 19:26:55 +01:00
StandaloneDockerPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
SwarmDockerPolicyTest.php	fix(auth): enforce authorization checks across API and Livewire components	2026-02-25 14:20:29 +01:00
TeamPolicyTest.php	fix: improve team resource route handling	2026-07-02 13:05:27 +02:00