Added authorization checks to 11 database-related Livewire components
that were loading sensitive database configuration without verifying
user permissions.
Changes:
- Added authorize('view', $database) to all 8 database type General.php mount() methods
- Added authorization to Configuration.php before loading database
- Added authorization to BackupEdit.php before loading backup config
- Added authorization to Import.php before loading database resource
This prevents unauthorized users from accessing database credentials,
connection strings, and configuration details.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| Backup | ||
| Clickhouse | ||
| Dragonfly | ||
| Keydb | ||
| Mariadb | ||
| Mongodb | ||
| Mysql | ||
| Postgresql | ||
| Redis | ||
| BackupEdit.php | ||
| BackupExecutions.php | ||
| BackupNow.php | ||
| Configuration.php | ||
| CreateScheduledBackup.php | ||
| Heading.php | ||
| Import.php | ||
| InitScript.php | ||
| ScheduledBackups.php | ||