security: restrict cluster/pool selection to admin users only

Browse Source

Backend:
- ApplicationsService.create() now accepts userRole parameter
- Non-admin users have clusterId/poolId stripped automatically
- Logs warning when non-admin attempts manual cluster selection

Frontend:
- Deploy wizard hides cluster assignment mode selector for non-admin users
- Non-admin users see a simple 'Default Cluster' info box instead
- Cluster/pool API queries only execute for admin users (enabled: isAdmin)
- Review step shows 'Default Cluster' for non-admin regardless of form state

...

This commit is contained in:

keyhan

2026-04-06 11:36:58 +03:30

parent 4853fe3020

commit 4fd102468e

4 changed files with 36 additions and 6 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

frontend/tsconfig.tsbuildinfo

+1 -1

File diff suppressed because one or more lines are too long