dashboard-unifi

Go to file

jwed f5848907f5 feat(access): strict allowlist + add groups by search

* UnifiPageGrant::userCanAccess no longer falls back to "open" when a
  page has no grants saved. Pages now require an explicit grant for
  every non-super-admin user — either a direct user grant or via a
  group they belong to. Matches the new dashboard-wide access model.
* Route enforcement returns 404 (was 403) so ungranted users can't even
  confirm the page exists.
* New /settings/pages-access/groups/search endpoint mirrors the
  user typeahead. Groups are no longer all listed by default — only
  super-admin groups (locked-on) and groups with at least one existing
  grant show up in the matrix. Operators add more via search.

v1.7.1.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 19:59:28 -04:00

config

feat: initial commit — UniFi snap-in package

2026-04-12 23:00:05 -07:00

database/migrations

fix(webhooks): test endpoint formats payload per platform; add missing column

2026-05-24 19:34:42 -04:00

src

feat(access): strict allowlist + add groups by search

2026-05-24 19:59:28 -04:00

composer.json

feat(access): strict allowlist + add groups by search

2026-05-24 19:59:28 -04:00