kolaente 5cd5dc409b fix: require admin access to list link shares ...

Previously, any user with read access to a project could list all link
shares including their hashes via GET /projects/{id}/shares. This allowed
read-only collaborators to obtain write or admin link share hashes and
escalate their privileges. Now ReadAll requires admin access to the
project.

2026-03-23 20:39:31 +00:00

..

caldav

…

cmd

refactor(user): export IsErrUserStatusError for use across packages

2026-03-23 12:06:16 +00:00

config

feat: add outgoingrequests config keys for centralized SSRF protection

2026-03-23 16:34:22 +00:00

cron

…

db

test(auth): add comprehensive disabled/locked user auth tests

2026-03-23 16:37:26 +00:00

doctor

chore(lint): suppress additional gosec false positives

2026-03-23 16:40:07 +01:00

e2etests

test(webhooks): allow non-routable IPs in E2E tests

2026-03-19 15:18:06 +01:00

events

feat: add InitEventsForTesting and Unfake for real event dispatch in tests

2026-03-05 12:49:27 +01:00

files

refactor: replace afero with FileStorage interface

2026-03-20 10:59:44 +01:00

health

…

i18n

chore(i18n): update translations via Crowdin

2026-03-21 01:09:32 +00:00

initialize

…

log

…

mail

…

metrics

…

migration

fix: use MySQL-compatible CREATE INDEX in migration 20260224215050

2026-03-23 16:45:50 +00:00

models

fix: require admin access to list link shares

2026-03-23 20:39:31 +00:00

modules

fix(auth): skip profile updates for disabled LDAP users

2026-03-23 16:37:26 +00:00

notifications

test: add tests for conversational email system

2026-03-08 16:03:47 +01:00

plugins

…

red

…

routes

fix: strip BasicAuth credentials from user webhook API responses

2026-03-23 16:35:47 +00:00

swagger

[skip ci] Updated swagger docs

2026-03-19 09:26:05 +00:00

user

test(auth): add comprehensive disabled/locked user auth tests

2026-03-23 16:37:26 +00:00

utils

chore(lint): suppress gosec false positives on SSRF-safe HTTP client calls

2026-03-23 16:34:22 +00:00

version

…

web

…

webtests

test(auth): add comprehensive disabled/locked user auth tests

2026-03-23 16:37:26 +00:00