Val 42e828d5c6 fix: Restrict updating/deleting of shared but not owned credentials (#7950) ... ## Summary Fix shared members being able to edit and delete credentials they don't own #### How to test the change: 1. ... ## Issues fixed Include links to Github issue or Community forum post or **Linear ticket**: > Important in order to close automatically and provide context to reviewers ... ## Review / Merge checklist - [x] PR title and summary are descriptive. **Remember, the title automatically goes into the changelog. Use `(no-changelog)` otherwise.** ([conventions](https://github.com/n8n-io/n8n/blob/master/.github/pull_request_title_conventions.md)) - [ ] [Docs updated](https://github.com/n8n-io/n8n-docs) or follow-up ticket created. - [x] Tests included. > A bug is not considered fixed, unless a test is added to prevent it from happening again. A feature is not complete without tests. > > *(internal)* You can use Slack commands to trigger [e2e tests](https://www.notion.so/n8n/How-to-use-Test-Instances-d65f49dfc51f441ea44367fb6f67eb0a?pvs=4#a39f9e5ba64a48b58a71d81c837e8227) or [deploy test instance](https://www.notion.so/n8n/How-to-use-Test-Instances-d65f49dfc51f441ea44367fb6f67eb0a?pvs=4#f6a177d32bde4b57ae2da0b8e454bfce) or [deploy early access version on Cloud](https://www.notion.so/n8n/Cloudbot-3dbe779836004972b7057bc989526998?pvs=4#fef2d36ab02247e1a0f65a74f6fb534e).		2023-12-07 10:35:40 +00:00
..
commands	feat(core): Coordinate manual workflow activation and deactivation in multi-main scenario (#7643)	2023-11-17 15:58:50 +01:00
environments	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
ExternalSecrets	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
ldap	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
mfa	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
middlewares	fix(core): Handle gzip and deflate compressed request payloads (#7461)	2023-10-18 21:52:15 +02:00
publicApi	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
saml	ci(core): Reduce memory usage in tests (part-1) (no-changelog) (#7654)	2023-11-08 16:29:39 +01:00
security-audit	perf(core): Lazyload security audit reporters (#7696)	2023-11-13 11:50:43 +01:00
shared	test(core): Use license mocker in RBAC tests (no-changelog) (#7912)	2023-12-04 13:56:48 +01:00
ActiveWorkflowRunner.test.ts	feat(core): Coordinate manual workflow activation and deactivation in multi-main scenario (#7643)	2023-11-17 15:58:50 +01:00
auth.api.test.ts	fix(core): Make sure mfa secret and recovery codes are not returned on login (#7936)	2023-12-06 10:00:13 +01:00
auth.mw.test.ts	refactor: Extract Invitation routes to InvitationController (no-changelog) (#7726)	2023-11-16 12:39:43 -05:00
binaryData.api.test.ts	fix(core): Account for non-ASCII chars in filename on binary data download (#7742)	2023-11-17 10:07:44 +01:00
community-packages.api.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
credentials.controller.test.ts	ci(core): Reduce memory usage in tests (part-1) (no-changelog) (#7654)	2023-11-08 16:29:39 +01:00
credentials.ee.test.ts	fix: Restrict updating/deleting of shared but not owned credentials (#7950)	2023-12-07 10:35:40 +00:00
credentials.test.ts	fix: Restrict updating/deleting of shared but not owned credentials (#7950)	2023-12-07 10:35:40 +00:00
eventbus.ee.test.ts	ci: Stop disabling linting rules that are explicitly set to warn (no-changelog) (#7669)	2023-11-09 14:05:39 +01:00
eventbus.test.ts	ci(core): Reduce memory usage in tests (part-1) (no-changelog) (#7654)	2023-11-08 16:29:39 +01:00
executions.controller.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
invitations.api.test.ts	fix: Return scopes on invitation accept endpoint (no-changelog) (#7917)	2023-12-05 11:18:41 +01:00
license.api.test.ts	ci(core): Reduce memory usage in tests (part-1) (no-changelog) (#7654)	2023-11-08 16:29:39 +01:00
me.api.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
metrics.test.ts	refactor(core): Make Logger a service (no-changelog) (#7494)	2023-10-25 16:35:22 +02:00
owner.api.test.ts	fix: Return scopes on owner setup endpoint (no-changelog) (#7860)	2023-11-29 11:33:32 +00:00
passwordReset.api.test.ts	fix(core): Initialize JWT Secret before it's used anywhere (#7707)	2023-11-15 12:17:18 +01:00
pruning.service.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
role.api.test.ts	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
tags.api.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
users.api.test.ts	test(core): Use license mocker in RBAC tests (no-changelog) (#7912)	2023-12-04 13:56:48 +01:00
variables.test.ts	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
webhooks.api.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
workflow.service.test.ts	feat(core): Coordinate manual workflow activation and deactivation in multi-main scenario (#7643)	2023-11-17 15:58:50 +01:00
workflowHistory.api.test.ts	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
workflowHistoryManager.test.ts	ci(core): Reduce memory usage in tests (part-2) (no-changelog) (#7671)	2023-11-10 15:04:26 +01:00
workflows.controller.ee.test.ts	refactor(core): Add central license mock for integration tests (no-changelog) (#7871)	2023-11-30 09:23:09 +01:00
workflows.controller.test.ts	fix(core): Consolidate ownership and sharing data on workflows and credentials (#7920)	2023-12-05 10:11:18 +01:00