rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
coolify/tests/Unit/Policies
History
Andras Bacsai b878dc8102 refactor(auth): enforce team member authorization across app 
Restrict sensitive operations to admins/owners and hide sensitive data
from team members:
- Add authorization checks to Livewire components and API endpoints
- Restrict team members from accessing sensitive permissions and data
- Hide environment variable values from non-admin team members
- Update policies to enforce team-level admin status requirement
- Add useSensitivePermissions policy for read:sensitive tokens
- Improve disabled button UX with auth-specific tooltips
- Add authorization checks in middleware for API tokens

Closes authorization gaps in project management, server management,
and settings components.
2026-02-27 11:41:01 +01:00
..
ApiTokenPolicyTest.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
ApplicationPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ApplicationPreviewPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ApplicationSettingPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
DatabasePolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
EnvironmentPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
EnvironmentVariablePolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
GithubAppPolicyTest.php test(browser): cover resource settings persistence 2026-02-25 19:26:55 +01:00
NotificationPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
PrivateKeyPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ProjectPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ResourceCreatePolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
S3StoragePolicyTest.php refactor(auth): enforce team member authorization across app 2026-02-27 11:41:01 +01:00
ServerPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ServiceApplicationPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ServiceDatabasePolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
ServicePolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
SharedEnvironmentVariablePolicyTest.php test(browser): cover resource settings persistence 2026-02-25 19:26:55 +01:00
StandaloneDockerPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00
SwarmDockerPolicyTest.php fix(auth): enforce authorization checks across API and Livewire components 2026-02-25 14:20:29 +01:00