iachat/app/controllers/api
Gabriel Jablonski b0a8fa70d0
fix(signatures): allow admins to manage inbox signatures without explicit membership (#260)
Administrators have access to all inboxes in an account but the
validate_inbox_access filter only checked InboxMember records, returning
401 for admins not explicitly added as inbox members.
2026-04-09 16:17:20 -03:00
..
v1 fix(signatures): allow admins to manage inbox signatures without explicit membership (#260) 2026-04-09 16:17:20 -03:00
v2 Merge branch 'chatwoot/develop' into chore/merge-upstream-4.12.0 2026-03-20 00:27:45 -03:00
base_controller.rb chore: Ensure privilege validations for API endpoints (#2224) 2021-06-11 11:44:31 +05:30