v1.10.2: require admin access for POSTs and file pull API

benhoyt released this 03 Apr 04:23

This addresses the following security issues:

Lock down all POSTs/writes to require admin.
Lock down the files "pull" API to require admin.
Lock down the task-websocket endpoint to admin.

Full Changelog: v1.10.1...v1.10.2

Assets 7