Graham McIntire
5fb5fea25e
- Add authorization check in organization_controller.ex update action - Only organization owners can modify organization settings via API - Returns 403 Forbidden if user is not an owner - Affects all organization settings including use_sites and name - Organization name can now be updated via API (existing field) This ensures critical organization settings are only changed by authorized users. |
||
|---|---|---|
| .. | ||
| channels | ||
| components | ||
| controllers | ||
| graphql | ||
| helpers | ||
| live | ||
| plugs | ||
| changelog_parser.ex | ||
| endpoint.ex | ||
| gettext.ex | ||
| gettext_helpers.ex | ||
| permissions.ex | ||
| plug_exceptions.ex | ||
| router.ex | ||
| telemetry.ex | ||
| telemetry_filter.ex | ||
| user_auth.ex | ||