Hugh Brown 66da278673 security: require org-admin for gateway session message endpoint ...

send_gateway_session_message only required basic auth (AUTH_DEP) while
all other gateway endpoints required ORG_ADMIN_DEP. Any authenticated
user could send messages to any gateway session. Now requires org-admin
and verifies the board belongs to the caller's organization.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:35:10 +05:30

..

openclaw

security: require org-admin for gateway session message endpoint

2026-03-07 23:35:10 +05:30

webhooks

security: mitigate prompt injection in agent instruction strings

2026-03-07 23:35:10 +05:30

__init__.py

refactor: update module docstrings for clarity and consistency

2026-02-09 15:49:50 +05:30

activity_log.py

redesigned dashboard page

2026-03-04 16:01:56 +05:30

admin_access.py

security: rename misleading require_admin to require_user_actor

2026-03-07 23:35:10 +05:30

approval_task_links.py

fix(mypy): narrow legacy approval task_id before dict key

2026-02-12 14:13:46 +00:00

board_group_snapshot.py

feat(tags): add tag management interfaces and update related schemas

2026-02-12 18:35:48 +05:30

board_lifecycle.py

redesigned dashboard page

2026-03-04 16:01:56 +05:30

board_snapshot.py

refactor: enhance code comments for clarity and maintainability across multiple files

2026-02-13 02:35:32 +05:30

lead_policy.py

feat(approvals): enhance approval model with task titles and confidence as float

2026-02-12 19:57:04 +05:30

mentions.py

refactor: simplify code formatting and improve readability across multiple files

2026-02-09 20:44:05 +05:30

organizations.py

feat(skills): consolidate skill-related models and update imports

2026-02-14 19:31:32 +05:30

queue_worker.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

queue.py

feat: implement unified agent lifecycle orchestration and metadata tracking

2026-02-25 00:34:04 +05:30

souls_directory.py

refactor: simplify code formatting and improve readability across multiple files

2026-02-09 20:44:05 +05:30

tags.py

feat(tags): add tag management interfaces and update related schemas

2026-02-12 18:35:48 +05:30

task_dependencies.py

refactor: enhance code comments for clarity and maintainability across multiple files

2026-02-13 02:35:32 +05:30