Skip to content

Hardens authorization and path handling in affected flows.”#1079

Merged
perber merged 1 commit into
mainfrom
fix/role-escalation-via-self-service-user
May 30, 2026
Merged

Hardens authorization and path handling in affected flows.”#1079
perber merged 1 commit into
mainfrom
fix/role-escalation-via-self-service-user

Conversation

@perber

@perber perber commented May 30, 2026

Copy link
Copy Markdown
Owner

No description provided.

Copilot AI review requested due to automatic review settings May 30, 2026 19:03
@perber perber changed the title fix(auth): prevent role escalation and last-admin demotion (GHSA-jj4r… fix(auth): harden user update authorization May 30, 2026
@perber
perber force-pushed the fix/role-escalation-via-self-service-user branch from 2c119ca to 47c6d24 Compare May 30, 2026 19:06
Comment thread internal/core/auth/user_service.go
Comment thread internal/wiki/auth/use_cases_test.go
@perber perber changed the title fix(auth): harden user update authorization Hardens authorization and path handling in affected flows.” May 30, 2026
@perber
perber merged commit cbd1ad7 into main May 30, 2026
7 of 8 checks passed
@perber
perber deleted the fix/role-escalation-via-self-service-user branch May 30, 2026 19:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants