claude a796577199 fix(security): restrict publish-presentation routes to project owners ...

Read-only collaborators and token-link users could publish, unpublish,
and rotate presentation share tokens. Change all three write endpoints
from ensureUserCanReadProject to ensureUserCanAdminProject so only the
project owner can perform these actions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-19 10:17:24 +00:00

..

src

fix(security): restrict publish-presentation routes to project owners

2026-06-19 10:17:24 +00:00

templates

Add a Typst compiler alongside Quarto and LaTeX

2026-06-01 12:56:30 +00:00

views

fix: footer translation, mobile search bar and table row layout

2026-06-16 15:31:09 +00:00