payloadcms__payload/packages at feat/default-user-access - payloadcms__payload - GetSkill.work

skills/payloadcms__payload

mirror of https://github.com/payloadcms/payload.git synced 2026-09-14 20:07:19 +08:00

Files

T

History

Dan Ribbens 0669f93893 refactor(payload): read slug from AccessArgs in defaultAuthAccess

Removes the factory shape introduced in 0951f5311 by reading `slug` from
AccessArgs directly. Keeps the security guard (`user.collection !== slug`
denies) but restores the plain `Access` signature so the export shape is
unchanged from Tasks 2/3. Also tightens the cross-collection regression
test to explicitly set the attacker user's collection instead of relying
on createLocalReq's admin.user fallback.

2026-08-15 10:02:22 -06:00

..

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

feat(codemod): add rename-experimental-table-feature transform (#17800 )

2026-08-14 16:46:14 -04:00

create-payload-app

fix: increase secret to 256 bits (#17707 )

2026-08-07 14:47:05 -04:00

feat(db-postgres,drizzle): add configurable SQL query operator handlers and support for unaccent (#17741 )

2026-08-11 22:10:18 +01:00

fix(db-mongodb): avoid unnecessary aggregation when no joins are selected (#17745 )

2026-08-12 14:15:35 +01:00

feat(db-postgres,drizzle): add configurable SQL query operator handlers and support for unaccent (#17741 )

2026-08-11 22:10:18 +01:00

feat(db-postgres,drizzle): add configurable SQL query operator handlers and support for unaccent (#17741 )

2026-08-11 22:10:18 +01:00

db-vercel-postgres

feat(db-postgres,drizzle): add configurable SQL query operator handlers and support for unaccent (#17741 )

2026-08-11 22:10:18 +01:00

fix(drizzle): warn on truncated identifiers, throw on collisions (#17651 )

2026-08-14 12:40:40 -07:00

email-nodemailer

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

fix(email-resend): http fetch error handling swallows errors (#17795 )

2026-08-14 18:42:54 +00:00

chore: update LICENSE.md (#17178 )

2026-07-01 21:53:15 +00:00

chore: update LICENSE.md (#17178 )

2026-07-01 21:53:15 +00:00

refactor!: remove deprecated auth result strategy (#17597 )

2026-08-04 21:07:50 +00:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

live-preview-react

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

live-preview-vue

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

chore: bump next.js from 16.2.7 to 16.3.0 (#17633 )

2026-08-04 15:30:56 -07:00

refactor(payload): read slug from AccessArgs in defaultAuthAccess

2026-08-15 10:02:22 -06:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

plugin-cloud-storage

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

plugin-ecommerce

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

plugin-form-builder

fix(plugin-form-builder): include autolink nodes in LinkHTMLConverter (#17787 )

2026-08-14 13:13:11 +01:00

plugin-import-export

fix: prevent multipart content-type backtracking (#17682 )

2026-08-11 13:43:29 -07:00

feat(plugin-mcp): bump mcp sdk to stable version (#17527 )

2026-07-28 18:22:05 +00:00

plugin-multi-tenant

feat(plugin-multi-tenant): use base access (#17739 )

2026-08-12 16:41:29 -04:00

plugin-nested-docs

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

plugin-redirects

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

refactor(ui)!: remove scss library and retire legacy css tokens (#17465 )

2026-07-27 10:01:24 -07:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

richtext-lexical

feat(richtext-lexical): fixed toolbar now can scroll horizontally for overflowing items (#17640 )

2026-08-06 12:35:21 +01:00

refactor!: remove deprecated auth result strategy (#17597 )

2026-08-04 21:07:50 +00:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

feat: add base access control (#17662 )

2026-08-12 14:07:45 -04:00

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

storage-vercel-blob

fix(storage-vercel-blob): allow overwriting existing blob keys (#17383 )

2026-07-22 09:36:31 -04:00

test: enable full e2e suite for tanstack start (#17542 )

2026-08-07 10:55:13 -04:00

feat(ui): add paste from clipboard button with smart detection for files or file URLs (#17306 )

2026-08-12 18:25:06 +01:00

typescript-plugin

ci: seed canary id on all versions (#17436 )

2026-07-21 13:57:17 -04:00

fix(ui): prevent stale upload docs from overwriting value (#17735 )

2026-08-14 19:57:27 -04:00