Michal
604bd76d60
CI / lint (pull_request) Has been cancelled
CI / typecheck (pull_request) Has been cancelled
CI / test (pull_request) Has been cancelled
CI / build (pull_request) Has been cancelled
CI / package (pull_request) Has been cancelled
fix: RBAC name-scoped access — CUID resolution + list filtering
...
Two bugs fixed:
- GET /api/v1/servers/:cuid now resolves CUID→name before RBAC check,
so name-scoped bindings match correctly
- List endpoints now filter responses via preSerialization hook using
getAllowedScope(), so name-scoped users only see their resources
Also adds fulldeploy.sh orchestrator script.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-23 12:26:37 +00:00
..
2026-02-23 00:38:48 +00:00
2026-02-21 05:09:14 +00:00
2026-02-21 05:09:14 +00:00
2026-02-21 04:35:00 +00:00
2026-02-23 11:05:19 +00:00
2026-02-21 04:35:00 +00:00
2026-02-23 11:05:19 +00:00
2026-02-21 04:35:00 +00:00
2026-02-21 04:52:12 +00:00
2026-02-22 18:40:58 +00:00
2026-02-21 04:35:00 +00:00
2026-02-23 11:05:19 +00:00
2026-02-21 05:34:20 +00:00
2026-02-21 04:35:00 +00:00
2026-02-22 18:40:58 +00:00
2026-02-21 05:30:49 +00:00
2026-02-21 05:30:49 +00:00
2026-02-23 11:05:19 +00:00
2026-02-22 18:40:58 +00:00
2026-02-22 18:40:58 +00:00
2026-02-22 18:40:58 +00:00
2026-02-23 11:05:19 +00:00
2026-02-23 11:05:19 +00:00
2026-02-23 12:26:37 +00:00
2026-02-23 12:26:37 +00:00
2026-02-22 18:40:58 +00:00
2026-02-21 04:35:00 +00:00
2026-02-23 11:05:19 +00:00
2026-02-22 18:40:58 +00:00