hugocasa 043c2c05b7 fix: forbid superadmin job tokens from global user and token management (#9715) ...

* fix: forbid superadmin job tokens from global user and token management

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* fix: extend superadmin job token guard to offboard and export routes

Apply forbid_superadmin_job_token to offboard_global_user and
export_global_users, the remaining global user-management routes that
were gated only by require_super_admin. Offboarding can delete a user
along with their tokens, password, invites and instance-group
membership, and export returns every user's password_hash, so both must
be unreachable by a superadmin job token.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-24 00:38:27 +02:00

..

src

fix: forbid superadmin job tokens from global user and token management (#9715)

2026-06-24 00:38:27 +02:00

Cargo.toml

rate limit token creation on CLOUD_HOSTED (10/min per user) (#8664)

2026-04-02 01:52:02 +00:00