sysops 787db6638f fix(PROJ-23): Privilege Escalation in Tenant-LDAP + Login-Reihenfolge ...

- BUG-1 (P0): domain_admin kann keine Rollen > auditor in default_role/
  group_mappings setzen — serverseitige Allowlist-Prüfung in
  handleSaveTenantLDAP (user/auditor) und handleAdminSaveTenantLDAP
  (user/auditor/domain_admin)
- WARN-1: Login-Fallback-Reihenfolge korrigiert — tenant_ldap wird
  jetzt VOR globalem ldap_config geprüft (Spec: tenant > global > local)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-18 00:32:47 +01:00

..

api

fix(PROJ-23): Privilege Escalation in Tenant-LDAP + Login-Reihenfolge

2026-03-18 00:32:47 +01:00

audit

feat(PROJ-17): Admin Dashboard Systemauslastung immer anzeigen

2026-03-14 11:43:19 +01:00

auth

fix(PROJ-23): Privilege Escalation in Tenant-LDAP + Login-Reihenfolge

2026-03-18 00:32:47 +01:00

imap

feat(PROJ-21): Phase 2+3+5+8 Multi-Tenancy + PROJ-2 EML/MBOX Upload

2026-03-17 21:03:40 +01:00

index

feat(PROJ-21/23): Pro-Tenant Xapian-Index + Tenant-LDAP Backend

2026-03-18 00:18:35 +01:00

ldapauth

feat(PROJ-22): LDAP Web-GUI + feat(PROJ-21): Multi-Tenancy Phase 1

2026-03-17 20:27:56 +01:00

ldapconfig

fix: unused time import in tenant_store.go

2026-03-18 00:19:00 +01:00

pop3

feat(PROJ-21): Phase 2+3+5+8 Multi-Tenancy + PROJ-2 EML/MBOX Upload

2026-03-17 21:03:40 +01:00

smtpd

fix(security): Kritische Sicherheitslücken beheben (SEC-01/02/03/05/08/17/22/26/28)

2026-03-18 00:05:47 +01:00

storage

feat(PROJ-21): Phase 2+3+5+8 Multi-Tenancy + PROJ-2 EML/MBOX Upload

2026-03-17 21:03:40 +01:00

tenantstore

feat(PROJ-21/23): Pro-Tenant Xapian-Index + Tenant-LDAP Backend

2026-03-18 00:18:35 +01:00

userstore

feat(PROJ-21): Phase 2+3+5+8 Multi-Tenancy + PROJ-2 EML/MBOX Upload

2026-03-17 21:03:40 +01:00