dylanhuff-at-coder 4875ae218a feat: enforce user secret file policy (#28518) ...

Adds the deployment option `--user-secrets-disable-file-path` /
`CODER_USER_SECRETS_DISABLE_FILE_PATH` / `userSecretsDisableFilePath`
(default `false`). When it is set, the create and batch-create
user-secret endpoints reject requests with a non-empty file path, and
PATCH validates the post-update state under a `SELECT ... FOR UPDATE`
row lock, rejecting a new or changed file path as well as enabled states
that would have no effective delivery target. Legacy stored paths are
preserved, so users can still edit, disable, clear the path, or migrate
the secret to env delivery.

This is PR 1 of a 4-PR stack; follow-ups cover manifest filtering, the
dashboard, and CLI/docs.

Refs #27488

Reviewed and updated by Coder Agents on behalf of @dylanhuff-at-coder.

2026-09-02 09:21:36 -07:00

..

agents.md

fix: model nullable UUID fields as uuid strings in Swagger (#28684)

2026-08-27 09:13:33 -07:00

aigateway.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

aiproviders.md

fix: surface duplicate AI provider hostname as warning, not error (#28208)

2026-08-24 13:27:22 +01:00

applications.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

audit.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

authentication.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

authorization.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

builds.md

fix: model nullable UUID fields as uuid strings in Swagger (#28684)

2026-08-27 09:13:33 -07:00

chats.md

docs: remove early access label from chats API reference (#28760)

2026-08-30 21:01:08 +02:00

debug.md

chore: update tailscale fork version used by coder to remove hairpin probes (#28682)

2026-08-27 14:40:37 +02:00

enterprise.md

feat: add deployment setting to disable the Codernauts game (#27662)

2026-09-02 11:29:35 +02:00

files.md

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

general.md

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

git.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

index.md

fix: bound request body size on JSON API endpoints (#28168)

2026-08-18 12:54:45 -07:00

initscript.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

insights.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

mcp.md

docs: complete swagger annotations for organization-scoped MCP routes (#28064)

2026-08-19 18:36:25 +00:00

members.md

feat: add chat model config RBAC resource (#27957)

2026-08-24 09:43:45 +00:00

notifications.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

organizations.md

fix: emit provisioner tags query param as string in swagger (#28311)

2026-08-31 11:36:43 -04:00

portsharing.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

prebuilds.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

provisioning.md

fix: emit provisioner tags query param as string in swagger (#28311)

2026-08-31 11:36:43 -04:00

schemas.md

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

secrets.md

feat: enforce user secret file policy (#28518)

2026-09-02 09:21:36 -07:00

templatebuilder.md

feat: add a per-template workspace rename setting (#27558)

2026-08-25 11:05:42 -06:00

templates.md

fix: model nullable UUID fields as uuid strings in Swagger (#28684)

2026-08-27 09:13:33 -07:00

users.md

feat: add chat model config RBAC resource (#27957)

2026-08-24 09:43:45 +00:00

workspaceproxies.md

feat: make CLI/API doc generators emit front-matter metadata (Phase 2) (#27246)

2026-08-11 15:22:55 +00:00

workspaces.md

fix: model nullable UUID fields as uuid strings in Swagger (#28684)

2026-08-27 09:13:33 -07:00