zitadel

mirror of https://github.com/zitadel/zitadel.git synced 2025-12-23 01:16:53 +00:00

Files

Marco A e6b5f559f0 fix: Force v2 permission checks on user listing

# Which Problems Are Solved

When the feature flag for enabling permission checks v2 is disabled, a user without permission could list users across instances and get the total number of users available.

# How the Problems Are Solved

Disregard the state of the feature flag and always enforce permission checks v2 on v2 APIs.

---------

Co-authored-by: Livio Spring <livio.a@gmail.com>
(cherry picked from commit 826039c620)

(cherry picked from commit 0e17d0005a)

2025-12-10 16:31:12 +01:00

assets

chore!: Introduce ZITADEL v3 (#9645 )

2025-04-02 16:53:06 +02:00

authz

fix: sanitize host headers before use

2025-10-29 10:24:31 +01:00

call

…

grpc

fix: Force v2 permission checks on user listing

2025-12-10 16:31:12 +01:00