capgo-22.14.0

🆕 Changelog

Added

• Console query execution now uses the caller's role. Queries run in the console are executed with the permissions and privileges of the user who initiated them, rather than with an elevated or default service role.
• Enforced least-privilege access for console operations. This ensures users can only view and interact with data their role is explicitly authorized to access, reducing the risk of accidental exposure or unauthorized actions.

Changed

• Console behavior may be more restrictive for some users. If a user's role lacks permissions for a queried resource, the query will now fail or return fewer results than before. Administrators should review role assignments and grants to ensure users have appropriate access for their console workflows.

Security

• Improved role-based access control (RBAC) for console queries. Running queries as the caller role closes a potential privilege-escalation path and aligns console access with the rest of the application's authorization model.

---

🔗 Full Changelog: capgo-22.13.3...capgo-22.14.0