2.2.0

Fixes

• A redirect set by the host AppController beforeFilter() (for example to the login page) is now returned instead of being replaced by the plugin's 403. #103
• The Authorization check is only skipped when the request carries the Authorization middleware service, so the admin no longer fails when the component is loaded without the middleware. With the middleware but without the component, the check is skipped on the service directly. #104 #105

Improvements

• AuditStash.standalone now works as documented: when enabled, the admin controllers skip the host AppController initialize() and its lifecycle callbacks. Application middleware still runs, and the AuditStash.adminAccess gate is enforced in both modes. #102

Upgrade notes

• If AuditStash.standalone is already true in your config, it now takes effect: components, authentication and callbacks from your AppController no longer run for the admin controllers. An adminAccess of fn() => true then leaves the admin open unless middleware guards it.

Full Changelog: 2.1.3...2.2.0