Skip to content

fix(services): align service configuration form with role permissions - #12356

Merged
andrasbacsai merged 2 commits into
mainfrom
ghsa-fp5j-stackform-masking
Oct 27, 2026
Merged

andrasbacsai merged 2 commits into
mainfrom
ghsa-fp5j-stackform-masking

Conversation

@andrasbacsai

Copy link
Copy Markdown
Member

Changes

  • The service configuration form now uses the same role rules as the environment variables page. Users who cannot manage the service environment see its configuration fields as read-only placeholders.
  • Only users who can manage the service environment can save these fields.
  • Admins and owners see no change.

Tests

  • Updated tests/Feature/Authorization/StackFormPasswordVisibilityTest.php.

🤖 Generated with Claude Code

andrasbacsai and others added 2 commits October 27, 2026 21:05
Hide every extra-field value in the service stack form from users who
cannot manage the service environment, not only fields flagged as
passwords. Save extra fields only for users with that permission.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
…ack form

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@andrasbacsai
andrasbacsai merged commit 5145aa5 into main Oct 27, 2026
2 checks passed
@andrasbacsai
andrasbacsai deleted the ghsa-fp5j-stackform-masking branch October 27, 2026 21:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant