Skip to content

[Codex] [108] Require builder access for group listing#19109

Merged
Dakuan merged 4 commits into
masterfrom
codex/vuln-108-groups-rbac
Jul 1, 2026
Merged

[Codex] [108] Require builder access for group listing#19109
Dakuan merged 4 commits into
masterfrom
codex/vuln-108-groups-rbac

Conversation

@Dakuan

@Dakuan Dakuan commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

Description

Adds the missing builder-or-admin authorization middleware to the global group listing endpoint and covers the behavior with route tests for builder access and BASIC-user denial.

@Dakuan
Dakuan marked this pull request as ready for review July 1, 2026 04:34
@readme-ai-writer

readme-ai-writer Bot commented Jul 1, 2026

Copy link
Copy Markdown

📚 No documentation changes were needed for this PR (Job ID: 6a4498d02877e35a26cd3a35).

@melohagan melohagan left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@Dakuan
Dakuan enabled auto-merge July 1, 2026 09:59
@Dakuan
Dakuan merged commit 1717935 into master Jul 1, 2026
34 checks passed
@Dakuan
Dakuan deleted the codex/vuln-108-groups-rbac branch July 1, 2026 10:03
@github-actions github-actions Bot locked and limited conversation to collaborators Jul 1, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants