master

GGitHubGuard AttachmentController's permission check against guests (#3140)

faf4bb03创建于 20 天前历史提交

文件	最后提交记录	最后更新时间
Commands	refactor(access): refine permission value object API (#3120) * refactor(access): refine permission value object API * fix(stubs): filter users by role id	1 个月前
Components	perf: reduce dashboard loading overhead (#3128)	1 个月前
Concerns	Fixed code style	6 个月前
Configuration	refactor(access): refine permission value object API (#3120) * refactor(access): refine permission value object API * fix(stubs): filter users by role id	1 个月前
Events	Fixed code style	1 年前
Http	Guard AttachmentController's permission check against guests (#3140) checkPermission() only aborted for an authenticated user who lacked the permission; a guest slipped past the abort_if check and then hit an unguarded Auth::user()->hasAccess() call in the middleware closure, turning into an uncaught 500 instead of a 403. Fixes #2861	20 天前
Models	refactor(access): refine permission value object API (#3120) * refactor(access): refine permission value object API * fix(stubs): filter users by role id	1 个月前
Notifications	Fixed code style	5 个月前
Providers	feat(breadcrumbs): support long breadcrumb trails (#3121)	1 个月前
ItemPermission.php	refactor(access): refine permission value object API (#3120) * refactor(access): refine permission value object API * fix(stubs): filter users by role id	1 个月前
Orchid.php	Simple working `FlushOctaneState` attributes	5 个月前
OrchidServiceProvider.php	refactor(access): refine permission value object API (#3120) * refactor(access): refine permission value object API * fix(stubs): filter users by role id	1 个月前