graham/towerops
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
towerops/lib/towerops_web/controllers/api/v1
History
Graham McIntire 5fb5fea25e
feat: require org owner permission to update organization settings 
- Add authorization check in organization_controller.ex update action
- Only organization owners can modify organization settings via API
- Returns 403 Forbidden if user is not an owner
- Affects all organization settings including use_sites and name
- Organization name can now be updated via API (existing field)

This ensures critical organization settings are only changed by authorized users.
2026-03-10 13:32:38 -05:00
..
activity_controller.ex feat: expand REST API with alerts, agents, org settings, members, integrations, metrics, activity endpoints 2026-02-14 11:28:57 -06:00
agent_release_webhook_controller.ex Add CI-triggered mass agent update webhook 2026-02-10 13:40:32 -06:00
agents_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
alerts_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
check_results_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
devices_controller.ex fix: allow site_id on device create regardless of use_sites setting 2026-02-15 12:28:06 -06:00
gaiia_webhook_controller.ex Fix tests, credo issues, and Gaiia sync bugs 2026-02-15 11:55:49 -06:00
geoip_controller.ex support prod ip db import 2026-01-28 14:03:35 -06:00
integrations_controller.ex feat: show human-readable sync status messages for integrations 2026-02-14 14:11:02 -06:00
invitations_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
members_controller.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
mib_controller.ex security: implement comprehensive security audit fixes 2026-03-05 13:08:10 -06:00
organization_controller.ex feat: require org owner permission to update organization settings 2026-03-10 13:32:38 -05:00
pagerduty_webhook_controller.ex Security fixes: mask credentials in logs/API, fix cookie/CSP/LIKE injection/webhooks 2026-02-15 09:09:04 -06:00
sites_controller.ex api: expand format_site to return all fields including lat/lng 2026-02-14 17:46:28 -06:00
stripe_webhook_controller.ex stripe and email after signup 2026-03-06 10:07:27 -06:00