Paul Lorenz 3027fdffd3 Prevent enrollment-based privilege escalation to admin identities. Fixes #4010 ...

- blocks non-admins from creating an enrollment that targets an admin identity
- blocks non-admins from reading, refreshing, or deleting an admin identity's enrollment
- filters admin identity enrollments out of enrollment lists for non-admin callers
- adds a permissions test covering the escalation paths and admin-allowed behavior

2026-06-19 12:27:53 -04:00

..

policy

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

routes

Prevent enrollment-based privilege escalation to admin identities. Fixes #4010

2026-06-19 12:27:53 -04:00