Ownership alone kept download, block and delete reachable for someone whose roles were removed by any path other than revokeStaff() — a direct role edit, say. Being staff is now part of ownership, so revocation closes these doors without depending on whoever removed the role also remembering the tunnel. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| VpnPeerPolicy.php | ||