coolify/app
Andras Bacsai 6a5fd40a5c refactor(policies): add uploadBackup ability and enforce it on backup upload endpoint
Introduce a dedicated `uploadBackup` ability on Application, Database,
Service, and ServiceDatabase policies (admin/owner only) and call
`$this->authorize('uploadBackup', $resource)` in `UploadController::upload`
so the backup-upload endpoint goes through the same policy layer as the
rest of the authorization refactor. Adds Pest coverage for each policy
variant plus HTTP-level checks.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-20 11:51:35 +02:00
..
Actions fix(server): exclude persistent resources from container prune 2026-04-19 15:17:47 +02:00
Console Resolve remaining merge conflicts 2026-04-14 11:14:22 +02:00
Contracts refactor: streamline job status retrieval and clean up repository interface 2025-01-10 19:53:13 +01:00
Data refactor: simplify remote process chain and harden ActivityMonitor 2026-03-26 13:26:16 +01:00
Enums Add new role enum and apply authorization 2024-10-28 17:08:24 +01:00
Events Make proxy restart run as background job to prevent localhost lockout 2025-12-03 10:30:12 +01:00
Exceptions feat(api): Improve OpenAPI spec and add rate limit handling for Hetzner 2025-12-11 12:12:43 +01:00
Helpers fix(ssh): handle chmod failures gracefully and simplify key management 2026-03-16 21:27:10 +01:00
Http refactor(policies): add uploadBackup ability and enforce it on backup upload endpoint 2026-04-20 11:51:35 +02:00
Jobs fix(healthcheck): user input is rejected if path contains comma and semicolon (#9223) 2026-04-14 10:41:55 +02:00
Listeners fix(proxy): defer UI refresh until Traefik version check completes 2025-12-27 15:16:58 +01:00
Livewire Merge remote-tracking branch 'origin/next' into audit-policies 2026-04-19 15:19:37 +02:00
Models Merge remote-tracking branch 'origin/next' into audit-policies 2026-04-19 17:40:12 +02:00
Notifications fix(notification): updated cloud subscription links to valid url 2026-03-30 11:37:28 +05:30
Policies refactor(policies): add uploadBackup ability and enforce it on backup upload endpoint 2026-04-20 11:51:35 +02:00
Providers refactor(api): validate and throttle feedback endpoint 2026-04-19 14:41:47 +02:00
Repositories refactor: streamline job status retrieval and clean up repository interface 2025-01-10 19:53:13 +01:00
Rules fix(validation): add IP validation for custom DNS servers input 2026-03-28 22:30:17 +05:30
Services refactor: remove verbose logging and use explicit exception types 2026-03-20 15:57:26 +01:00
Support fix(validation): support IP binding in port mappings 2026-04-11 22:24:52 +05:30
Traits feat(deployment): add command_hidden flag to hide command text in logs 2026-03-25 16:48:49 +01:00
View/Components Merge remote-tracking branch 'origin/next' into audit-policies 2026-04-19 15:19:37 +02:00