Files
dokploy/apps
Gourav Kumar Dhiman 9f6e82abf6 fix(monitoring): let members with service access see container monitoring (#5716)
* fix(monitoring): let members with service access see container monitoring

The Monitoring tab opened /listen-docker-stats-monitoring without a
serviceId, so the socket required the docker permission and closed with
"Not authorized" for members granted the service. Pass the serviceId from
every service page, as the Logs tab does.

With a serviceId, the socket now also checks that the requested container
belongs to that service (app name for applications and databases, project
or namespace label for compose and stacks), and never serves host stats.

Closes #5674

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(monitoring): reject unknown appType on the service-scoped stats path

appType comes from the URL, so an unexpected value skipped every
ownership filter and returned the first running container's stats.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 19:10:00 +05:30
..