Commit 99a11e0
fix: Add missing authorization to Identity endpoints (#1170)
- ChangePasswordEndpoint: Add RequireAuthorization() for logged-in users
- GetUserProfileEndpoint: Add RequireAuthorization() for logged-in users
- AssignUserRolesEndpoint: Add RequirePermission(Users.ManageRoles)
- GetUserPermissionsEndpoint: Add RequirePermission(Users.View)
- Add Users.ManageRoles permission constant
These endpoints were previously accessible without proper authorization checks.
Co-authored-by: jarvis <jarvis@codewithmukesh.com>1 parent 496350f commit 99a11e0
0 file changed
0 commit comments