- Remove invalid null return from session callback (must return session object)
- Prevent admin from disabling their own account (guard with isSelf check)
- Hide disable UI when viewing own profile
- Add user existence check to changeDisabled endpoint
- Add OpenAPI metadata to changeDisabled mutation
- Add disabled boolean field to user schema (PostgreSQL, MySQL, SQLite)
- Block disabled users from logging in via any auth provider (credentials, LDAP, OIDC)
- Check disabled status in session callback to prevent session replay
- Add changeDisabled API endpoint (admin-only)
- Include disabled field in getById and getAll user endpoints
- Add disable/enable user toggle in admin UI with status badge in user list
* feat: add integration access check to middlewares
* fix: format issues
* fix: remove group and user permissions and items from context
* refactor: move action check to seperate function
* chore(deps): update dependency eslint to v9
* chore: migrate eslint to v9
* fix: dependency issues
* fix: unit tests not working
* chore: disable lint check for Image component that does not work in ci
* fix: lint issue
---------
Co-authored-by: homarr-renovate[bot] <158783068+homarr-renovate[bot]@users.noreply.github.com>
Co-authored-by: Meier Lukas <meierschlumpf@gmail.com>
* fix: cache is not exportet from react
* fix: format issue
* wip: add usage of group permissions
* feat: show inherited groups and add manage group
* refactor: improve board access management
* chore: address pull request feedback
* fix: type issues
* fix: migrations
* test: add unit tests for board permissions, permissions and board router
* test: add unit tests for board router and get current user permissions method
* fix: format issues
* fix: deepsource issue
ajnart
KyleandThomas
Meier Lukas
ManuelandMeier Lukas
homarr-renovate[bot]andMeier Lukas