towerops/lib/towerops_web/controllers/api
Graham McIntire 5fb5fea25e
feat: require org owner permission to update organization settings
- Add authorization check in organization_controller.ex update action
- Only organization owners can modify organization settings via API
- Returns 403 Forbidden if user is not an owner
- Affects all organization settings including use_sites and name
- Organization name can now be updated via API (existing field)

This ensures critical organization settings are only changed by authorized users.
2026-03-10 13:32:38 -05:00
..
v1 feat: require org owner permission to update organization settings 2026-03-10 13:32:38 -05:00
account_data_controller.ex security: implement comprehensive security audit fixes 2026-03-05 13:08:10 -06:00
error_helpers.ex fix: resolve compilation errors, test failures, and credo issues 2026-02-14 12:23:10 -06:00
mobile_auth_controller.ex security: fix critical vulnerabilities and atom exhaustion risks 2026-02-08 10:30:30 -06:00
mobile_controller.ex rename equipment to device 2026-01-17 14:48:46 -06:00