Repository navigation

Authentication and Authorization Security Fixes - #158

Merged

cengique merged 11 commits into

security/auth-review

Sep 20, 2026

Merged

Authentication and Authorization Security Fixes#158
cengique merged 11 commits into
developfrom
security/auth-review

Commits on Sep 17, 2026
- Fix login session identity mismatch
  mohab-elshamy
  committed
  d5ab5b2
Commits on Sep 18, 2026
- Prevent sensitive user and private resource data exposure
  mohab-elshamy
  committed
  6526d48
Commits on Sep 19, 2026
- Validate files when forking projects
  mohab-elshamy
  committed
  4f99145
- Restrict profile image deletion to owner
  mohab-elshamy
  committed
  4bc4c07
- Restrict file moves to project owners
  mohab-elshamy
  committed
  f0995c7
Commits on Sep 20, 2026
- Restrict publication management to project members
  mohab-elshamy
  committed
  a5c2302
- Require project membership for log writes
  mohab-elshamy
  committed
  16160de
- Merge remote-tracking branch 'origin/develop' into security/auth-review
  mohab-elshamy
  committed
  c89ccdd
- Enforce project visibility for comment actions
  mohab-elshamy
  committed
  57a1beb
- Prevent private project notification leaks
  mohab-elshamy
  committed
  ebe324c
- Restrict email sending to administrators
  mohab-elshamy
  committed
  751d7be