sriram veeraghanta 587fe76032 fix: prevent privilege escalation in project member role updates (GHSA-494h-3rcq-5g3c) (#8833) ... Restrict role modification in ProjectMemberViewSet.partial_update to Admins only and enforce that requesters cannot modify or assign roles equal to or higher than their own. Previously, Guests could demote Admins by exploiting a missing lower-bound check on role changes. Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-06 15:54:01 +05:30
..
base.py	[WEB-6194]migration: added archived_at in IssueView #8641	2026-02-17 19:06:13 +05:30
invite.py	chore: add copyright (#8584)	2026-01-27 13:54:22 +05:30
member.py	fix: prevent privilege escalation in project member role updates (GHSA-494h-3rcq-5g3c) (#8833)	2026-04-06 15:54:01 +05:30