carfeii
fccdd29421
Add per-user ownership check to dashboard load/update/delete
...
Dashboard resource endpoints (load_resource, update_resource,
update_canvas, delete_resource) fetched a core_dashboard row by id
alone, with no check that the caller created it. The only gating
decorator verified workspace membership, not per-user ownership, so
any authenticated workspace member could read, rename, or delete any
other member's dashboard by id. list_resource already filters by
create_by, showing dashboards are meant to be private per creator;
this adds the same check to the other four code paths.
2026-09-17 10:21:18 +08:00
wangjiahao
3f68b618ef
fix: Authenticated IDOR in Dashboard update endpoints allows cross-user Dashboard modification
2026-09-09 16:36:19 +08:00
wangjiahao
33c87b61a4
fix: Authenticated IDOR in Dashboard update endpoints allows cross-user Dashboard modification
2026-09-09 14:11:08 +08:00
wangjiahao
12ed99573f
fix(dashboard): Fix the issue where the predicted data cannot be displayed on the data dashboard
2026-04-27 10:53:14 +08:00
wangjiahao
82de276aad
feat(dashboard): The dashboard supports displaying real-time data
2026-02-28 16:02:08 +08:00
王嘉豪
9dccaf12d1
feat(dashboard): The dashboard supports displaying real-time data ( #930 )
2026-02-28 14:53:51 +08:00
wangjiahao
d12c8b2b55
refactor: Optimize typos checking issues
2026-01-06 15:46:55 +08:00
fit2cloud-chenyw
692103ddb2
fix: API security vulnerability ( #714 )
2025-12-30 14:16:30 +08:00
wangjiahao
ddd3dcd28f
refactor: update api doc
2025-12-29 16:19:27 +08:00
wangjiahao
1df98cec0f
refactor: Add logs to the system operation method
2025-12-26 17:14:34 +08:00
王嘉豪
5c88ff8054
refactor: Add logs to the system operation method ( #692 )
2025-12-26 11:49:25 +08:00
王嘉豪
af99f105e2
refactor: refactor log management ( #682 )
2025-12-25 11:46:11 +08:00
王嘉豪
d04395813a
feat: Support log management ( #668 )
2025-12-24 14:16:40 +08:00
王嘉豪
f1cdbc9a00
feat: Support recording system operation logs ( #651 )
2025-12-22 17:34:01 +08:00
wangjiahao
277671c5da
refactor: canvas shape-point style update
2025-07-21 19:40:02 +08:00
wangjiahao
9c23895fc6
refactor: dashboard tab & sort
2025-07-21 14:16:36 +08:00
wangjiahao
6fb855c669
refactor: dashboard with auth
2025-07-21 12:23:42 +08:00
wangjiahao
76b757823e
refactor: dashboard view
2025-06-19 08:46:46 +08:00
wangjiahao
0c98f3c20f
refactor: dashboard view
2025-06-18 18:26:53 +08:00
wangjiahao
f46b7212f5
refactor: preview head
2025-06-11 17:00:18 +08:00
wangjiahao
288cc34e2c
refactor: update toolbar
2025-06-11 10:32:12 +08:00
wangjiahao
344027c833
refactor: snapshot
2025-06-10 17:58:37 +08:00
wangjiahao
8fd76c4b20
refactor: new resource
2025-06-09 22:13:03 +08:00
wangjiahao
e5ae9b5ceb
refactor: canvas save
2025-06-09 15:06:08 +08:00
wangjiahao
5c663b4299
refactor: dashboard preview
2025-06-09 11:41:51 +08:00
wangjiahao
2511e07abf
refactor: dashboard preview
2025-06-06 14:39:55 +08:00
wangjiahao
20ec595120
refactor: dashboard preview
2025-06-05 18:39:54 +08:00
wangjiahao
7567c1eef2
refactor: dashboard preview
2025-06-05 18:11:02 +08:00
wangjiahao
04721c9d27
refactor: dashboard preview
2025-06-05 16:09:45 +08:00
wangjiahao
866344b26b
feat: dashboard preview
2025-06-03 18:36:01 +08:00
carfeii