security: limit API impersonate feature to only super admins

This commit is contained in:
RhodeCode Admin 2025-03-24 05:00:28 +01:00
parent c2914495c0
commit aef3cca3ea
7 changed files with 94 additions and 97 deletions

View file

@ -18,7 +18,8 @@ General
Security
^^^^^^^^
- API: changed impersonate features to only be allowed by super-admins instead of repo admins.
This applies better practices to this feature of API.
Performance
^^^^^^^^^^^