Ownership alone kept download, block and delete reachable for someone whose roles were removed by any path other than revokeStaff() — a direct role edit, say. Being staff is now part of ownership, so revocation closes these doors without depending on whoever removed the role also remembering the tunnel. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| AdminConsoleTest.php | ||
| AdminHostRestrictionTest.php | ||
| AdminSettingsTest.php | ||
| DatacenterTest.php | ||
| HostManagementTest.php | ||
| MaintenanceTest.php | ||
| ProvisioningActionsTest.php | ||
| RbacTest.php | ||
| VpnTest.php | ||