fix(api): gate files proxy by subuser file permission and bound activity bodiesBrowse files at 0fb34ff
stripsior committed 2 months ago · 1 changed file
Subusers without a file permission (* / file / file.*) are now denied
all file proxy access, mirroring the SFTP auth check. Cap delete/rename
request bodies at 64KB and bound activity log entries before recording.