v4.14.0 v4.15.0

Name: strictjson
Author: tanchongmin

medium risk

tanchongmin/strictjsonOct 3, 2026 → Oct 4, 20261 day between releases

What's New

Adds strict admin-scoped resource uploads and improves API validation for group removal

Breaking Changes

Restrict uploaded groups, roles, and permissions to the admin's organization
Handle missing organization and user in remove-user-from-group API

New Features

Strict admin-scoped resource upload restrictions
Missing organization/user validation in group removal API
JWT-Custom refresh token type marking
Camera resource management on component unmount
Enhanced enforcer model configuration error handling

Improvements

Redirect to requested page after login
Skip existing groups, roles, and permissions during uploads
Proper camera release on component unmount
Improved enforcer model config loading error handling
Internal consistency for JWT-Custom refresh tokens

Bug Fixes

Fix camera resource leaks on unmount
Return error when enforcer model config fails to load
Skip duplicate groups, roles, and permissions by row owner
Correct JWT-Custom refresh token type marking
Fix login redirect to requested page

Upgrade Notes

API calls for removing users from groups now strictly require valid organization and user IDs. Uploaded groups, roles, and permissions are now restricted to the admin's organization scope.

The Two Releases

v4.14.0

Oct 3, 2026· 19 days ago

Adds account menu hover functionality, improves login flow with stable error codes, and enhances terms of use enforcement.

Full release notes

v4.15.0

Oct 4, 2026· 18 days ago

Fixes handling of missing organization and user in API calls, improves JWT token management, and enhances camera handling.

Full release notes