towerops/lib/towerops_web/controllers/api
Graham McIntire fb8ffde119
fix: prevent site assignment when sites are disabled for org
When an organization has sites disabled (use_sites=false), the API
now automatically removes any site_id from device creation requests,
ensuring devices are assigned directly to the organization instead.

This prevents Terraform (and other API clients) from creating devices
in sites when sites functionality is disabled for the organization.

Fixes issue where Terraform could bypass site restrictions via API.
2026-02-08 13:24:48 -06:00
..
v1 fix: prevent site assignment when sites are disabled for org 2026-02-08 13:24:48 -06:00
account_data_controller.ex make devices site optional and many test fix 2026-02-04 15:05:42 -06:00
mobile_auth_controller.ex security: fix critical vulnerabilities and atom exhaustion risks 2026-02-08 10:30:30 -06:00
mobile_controller.ex rename equipment to device 2026-01-17 14:48:46 -06:00