John-Mason Shackelford 057d56513e fix: Align create and index to both return 404 for non-member rooms ...

Both create and index now return HTTP 404 Not Found when a bot tries to
access a room it's not a member of. This is consistent with REST API
security best practices (not revealing resource existence) and ensures
read and write permissions are handled identically.

Changed create action to no longer call super (which rendered HTML) and
instead directly handle the request with proper JSON API error responses.

Added test to verify create returns 404 for non-member rooms.

Co-authored-by: openhands <openhands@all-hands.dev>

2026-04-08 13:59:56 -04:00

..

assets

Show admin toggle, but disable for current user

2025-12-08 22:53:11 -06:00

channels

Hello world

2025-08-21 09:31:59 +01:00

controllers

fix: Align create and index to both return 404 for non-member rooms

2026-04-08 13:59:56 -04:00

helpers

Rework toggle as switch

2025-12-01 23:13:54 -06:00

javascript

[Logout localhost fix] - fixing an error for logout process on localhost.

2025-10-06 15:14:23 +02:00

jobs

Add IP-based user banning

2025-11-26 14:30:38 +00:00

models

Delete server-side session on logout

2026-01-16 09:31:22 +01:00

views

Ensure edit (not trash) is displayed

2025-12-08 22:57:38 -06:00