mirror of
https://github.com/tiennm99/coolify.git
synced 2026-10-15 04:18:34 +00:00
feat(auth): restrict sensitive data visibility for team members
Hide database passwords, connection URLs, and debug logs from team members: - Database components: hide passwords and connection URLs for members - Deployment UI: gate debug log toggle behind update permission - Debug logs: prevent members from viewing debug output - Storage/services: hide sensitive credentials from members Members can still view non-sensitive configuration while admins retain full access to all data.
This commit is contained in:
1 parent
0636789071
commit
c924655999
27 files changed
+382
-119
No files matched your search
@@ -50,6 +50,8 @@ class General extends Component
|
||||
|
||||
public bool $enable_ssl = false;
|
||||
|
||||
public bool $isPasswordHiddenForMember = false;
|
||||
|
||||
public function getListeners()
|
||||
{
|
||||
$userId = Auth::id();
|
||||
@@ -81,6 +83,13 @@ class General extends Component
|
||||
} catch (\Throwable $e) {
|
||||
return handleError($e, $this);
|
||||
}
|
||||
|
||||
$this->isPasswordHiddenForMember = auth()->user()?->isMember() ?? false;
|
||||
if ($this->isPasswordHiddenForMember) {
|
||||
$this->keydbPassword = '';
|
||||
$this->dbUrl = null;
|
||||
$this->dbUrlPublic = null;
|
||||
}
|
||||
}
|
||||
|
||||
protected function rules(): array
|
||||
|
||||
Reference in new issue
Block a user