Pranav 86da3f7c06 fix: Remove account_id from params since it is not used (#13116) ...

account_id was permitted in strong parameters, allowing authenticated
admins to transfer resources (Portals, Automation Rules, Macros) to
arbitrary accounts.

 Fix: Removed account_id from permitted params in 4 controllers:
  - portals_controller.rb
  - automation_rules_controller.rb
  - macros_controller.rb
  - twilio_channels_controller.rb

2025-12-19 17:07:53 -08:00

..

v1

fix: Remove account_id from params since it is not used (#13116)

2025-12-19 17:07:53 -08:00

v2

feat(ce): Add Year in review feature (#13078)

2025-12-15 17:24:45 -08:00

base_controller.rb

chore: Ensure privilege validations for API endpoints (#2224)

2021-06-11 11:44:31 +05:30