mirror of
https://github.com/tiennm99/coolify.git
synced 2026-10-15 16:14:35 +00:00
feat(auth): restrict sensitive data visibility for team members
Hide database passwords, connection URLs, and debug logs from team members: - Database components: hide passwords and connection URLs for members - Deployment UI: gate debug log toggle behind update permission - Debug logs: prevent members from viewing debug output - Storage/services: hide sensitive credentials from members Members can still view non-sensitive configuration while admins retain full access to all data.
This commit is contained in:
1 parent
0636789071
commit
c924655999
27 files changed
+382
-119
No files matched your search
@@ -28,7 +28,9 @@ class DeploymentNavbar extends Component
|
||||
{
|
||||
$this->application = Application::ownedByCurrentTeam()->find($this->application_deployment_queue->application_id);
|
||||
$this->server = $this->application->destination->server;
|
||||
$this->is_debug_enabled = $this->application->settings->is_debug_enabled;
|
||||
$this->is_debug_enabled = auth()->user()->isMember()
|
||||
? false
|
||||
: $this->application->settings->is_debug_enabled;
|
||||
}
|
||||
|
||||
public function deploymentFinished()
|
||||
@@ -67,10 +69,15 @@ class DeploymentNavbar extends Component
|
||||
return '';
|
||||
}
|
||||
|
||||
$isMember = auth()->user()->isMember();
|
||||
|
||||
$markdown = "# Deployment Logs\n\n";
|
||||
$markdown .= "```\n";
|
||||
|
||||
foreach ($logs as $log) {
|
||||
if ($isMember && ! empty($log['hidden'])) {
|
||||
continue;
|
||||
}
|
||||
if (isset($log['output'])) {
|
||||
$markdown .= $log['output']."\n";
|
||||
}
|
||||
|
||||
Reference in new issue
Block a user