starred/panel
1
0
Fork 0
mirror of https://github.com/pelican-dev/panel.git synced 2026-02-26 03:21:41 +03:00
Code Issues 42 Packages Projects Releases 12 Wiki Activity

[PR #1014] [MERGED] Add backend validation to subuser permissions #1117

New Issue
Closed
opened 2026-02-04 19:18:57 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-04 19:18:57 +03:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/pelican-dev/panel/pull/1014
Author: @Boy132
Created: 2/17/2025
Status: ✅ Merged
Merged: 2/21/2025
Merged by: @Boy132

Base: main ← Head: boy132/fix-subuser-permissions

📝 Commits (3)

  • d3b0ba9 add backend validation to subuser permissions
  • 6bfa430 always allow websocket.connect
  • e74a5f3 use collection to clean permissions

📊 Changes

2 files changed (+21 additions, -7 deletions)

View changed files

📝 app/Services/Subusers/SubuserCreationService.php (+9 -1)
📝 app/Services/Subusers/SubuserUpdateService.php (+12 -6)

📄 Description

This makes sure a subuser can't create another subuser with more permissions than they have.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/pelican-dev/panel/pull/1014 **Author:** [@Boy132](https://github.com/Boy132) **Created:** 2/17/2025 **Status:** ✅ Merged **Merged:** 2/21/2025 **Merged by:** [@Boy132](https://github.com/Boy132) **Base:** `main` ← **Head:** `boy132/fix-subuser-permissions` --- ### 📝 Commits (3) - [`d3b0ba9`](https://github.com/pelican-dev/panel/commit/d3b0ba9ce3557952d050fb88f071a3fcaea592ee) add backend validation to subuser permissions - [`6bfa430`](https://github.com/pelican-dev/panel/commit/6bfa430dc2504167b1dc3b0f08245f5a9b772ee0) always allow websocket.connect - [`e74a5f3`](https://github.com/pelican-dev/panel/commit/e74a5f3043665e2debc37abe8140e4f8eb9f4631) use collection to clean permissions ### 📊 Changes **2 files changed** (+21 additions, -7 deletions) <details> <summary>View changed files</summary> 📝 `app/Services/Subusers/SubuserCreationService.php` (+9 -1) 📝 `app/Services/Subusers/SubuserUpdateService.php` (+12 -6) </details> ### 📄 Description This makes sure a subuser can't create another subuser with more permissions than they have. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
OVERLORD added the pull-request label 2026-02-04 19:18:57 +03:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
not confirmed
pull-request
Mirrored from GitHub Pull Request
 👑 sponsor
💰 fund
🔴 hard
🟡 medium
🟡 medium
🟡 medium
🟢 easy
🟢 easy
🟢 easy
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/panel#1117
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?