- Add authorization check in organization_controller.ex update action - Only organization owners can modify organization settings via API - Returns 403 Forbidden if user is not an owner - Affects all organization settings including use_sites and name - Organization name can now be updated via API (existing field) This ensures critical organization settings are only changed by authorized users. |
||
|---|---|---|
| .. | ||
| v1 | ||
| account_data_controller.ex | ||
| error_helpers.ex | ||
| mobile_auth_controller.ex | ||
| mobile_controller.ex | ||