[google/syzkaller] c8d8c5: dashboard/app: fix API access checks

[Dmitry Vyukov]

Branch: refs/heads/gh-readonly-queue/master/pr-6829-73a252ac8d271a17af0607da173d8821b8ce4311
Home: https://github.com/google/syzkaller
Commit: c8d8c52d6e4d7bc5716f7e5848dad2de4aea55e1
https://github.com/google/syzkaller/commit/c8d8c52d6e4d7bc5716f7e5848dad2de4aea55e1
Author: Dmitry Vyukov <dvy...@google.com>
Date: 2026-02-19 (Thu, 19 Feb 2026)

Changed paths:
M dashboard/app/access_test.go
M dashboard/app/ai_test.go
M dashboard/app/api.go
M dashboard/app/api_test.go
M dashboard/app/app_test.go
M dashboard/app/asset_storage_test.go
M dashboard/app/bisect_test.go
M dashboard/app/cache_test.go
M dashboard/app/commit_poll_test.go
M dashboard/app/discussion_test.go
M dashboard/app/email_test.go
M dashboard/app/fix_test.go
M dashboard/app/jobs_test.go
M dashboard/app/linux_reporting_test.go
M dashboard/app/main_test.go
M dashboard/app/notifications_test.go
M dashboard/app/public_json_api_test.go
M dashboard/app/reporting_test.go
M dashboard/app/repro_test.go
M dashboard/app/subsystem_test.go
M dashboard/app/tree_test.go
M dashboard/app/util_test.go

Log Message:
-----------
dashboard/app: fix API access checks

Currently we permit per-namespace clients to access global APIs.
For example, a secondary OS syz-manager client can poll bugs
from all namespaces. This is wrong and bad. Don't permit namespace
clients to access global APIs.



To unsubscribe from these emails, change your notification settings at https://github.com/google/syzkaller/settings/notifications

[Dmitry Vyukov]

Branch: refs/heads/master