michal/mcpctl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: project list uses RBAC filtering instead of ownerId #25

Merged
michal merged 1 commits from fix/project-list-rbac into main 2026-02-23 18:52:30 +00:00
Conversation 0 Commits 1 Files Changed 1 +3 -3
michal commented 2026-02-23 18:52:28 +00:00
Owner
Copy Link

The list endpoint filtered by ownerId, preventing users with name-scoped RBAC view bindings from seeing projects they have access to.

The list endpoint filtered by ownerId, preventing users with name-scoped RBAC view bindings from seeing projects they have access to.
michal added 1 commit 2026-02-23 18:52:29 +00:00
fix: project list should use RBAC filtering, not ownerId
Some checks failed
CI / lint (pull_request) Has been cancelled
Details
CI / typecheck (pull_request) Has been cancelled
Details
CI / test (pull_request) Has been cancelled
Details
CI / build (pull_request) Has been cancelled
Details
CI / package (pull_request) Has been cancelled
Details
c6cc39c6f7 
The list endpoint was filtering by ownerId before RBAC could include
projects the user has view access to via name-scoped bindings.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
michal merged commit ce81d9d616 into main 2026-02-23 18:52:30 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michal
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: michal/mcpctl#25
Delete Branch "fix/project-list-rbac"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?