golem15/summercms
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(12.1-01): cabana.ForbiddenError answers a refused write with 403

Browse Source 
- hooks and bulk, record, toolbar and widget actions may return it
- 403 forbidden with the localized message and field details; the write's
  transaction is rolled back; other errors stay the opaque 500
- form shows a refused save as a persistent banner and keeps the values;
  a refused delete is a toast
- smoke tests, OpenAPI notes, dist, README, docs
This commit is contained in:
Jakub Zych
2026-10-04 23:53:34 +02:00
parent 61d5fc72ad
commit 71073bc8a2
23 changed files with 486 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
admin/openapi/admin.json
View File

@@ -2662,7 +2662,7 @@
}
}
},
"description": "Forbidden"
"description": "also returned when controller code refuses the write; details may name fields"
},
"404": {
"content": {
@@ -2767,7 +2767,7 @@
}
}
},
"description": "Forbidden"
"description": "also returned when controller code refuses the write; details may name fields"
},
"404": {
"content": {
@@ -2892,7 +2892,7 @@
}
}
},
"description": "Forbidden"
"description": "also returned when controller code refuses the write; details may name fields"
},
"404": {
"content": {
@@ -3820,7 +3820,7 @@
}
}
},
"description": "Forbidden"
"description": "also returned when controller code refuses the write; details may name fields"
},
"404": {
"content": {
@@ -4032,7 +4032,7 @@
}
}
},
"description": "Forbidden"
"description": "also returned when controller code refuses the write; details may name fields"
},
"404": {
"content": {
@@ -4156,7 +4156,7 @@
}
}
},
"description": "Forbidden"
"description": "also returned when controller code refuses the write; details may name fields"
},
"404": {
"content": {