towerops/lib/towerops_web/controllers/api/v1
Graham McIntire fb8ffde119
fix: prevent site assignment when sites are disabled for org
When an organization has sites disabled (use_sites=false), the API
now automatically removes any site_id from device creation requests,
ensuring devices are assigned directly to the organization instead.

This prevents Terraform (and other API clients) from creating devices
in sites when sites functionality is disabled for the organization.

Fixes issue where Terraform could bypass site restrictions via API.
2026-02-08 13:24:48 -06:00
..
devices_controller.ex fix: prevent site assignment when sites are disabled for org 2026-02-08 13:24:48 -06:00
geoip_controller.ex support prod ip db import 2026-01-28 14:03:35 -06:00
mib_controller.ex live device polling 2026-02-01 13:19:32 -06:00
sites_controller.ex security: fix critical vulnerabilities and atom exhaustion risks 2026-02-08 10:30:30 -06:00