3 Commits

Author	SHA1	Message	Date
UNITRONIX	d7a2fe6562	fix(security): harden update restore and notification CSRF ... Protect backup restores and session-authenticated notification writes from unsafe state changes, while clearing CodeQL false positives without weakening intentional TLS pinning. Refs CodeQL alerts #297-310 Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)	2026-08-23 21:08:05 +02:00
UNITRONIX	25618caac1	fix(console): fail closed on missing peer/strategy scope writers ... Reject POST/PATCH /api/users before mutating when peer grant or strategy assignment DB methods are absent; return refreshed scope on PATCH; warn on unknown peerIds; add facade parity and scope regression tests. Refs #380 Thanks: INSOLVE (Honorary); Marco Jakobs (@jacotec); MyNameisStitch (@MyNameisStitch); Redspin (@playerumpknow)	2026-08-22 01:17:41 +02:00
UNITRONIX	d671c86859	feat: user scope UX, role labels, and device visibility defaults (#227) ... Add folder/direct-device/strategy assignment from User Management, clearer Pro vs Remote Operator labeling, optional restricted device scope mode, and Go/Node scope parity.	2026-07-05 19:44:18 +02:00