Matthew Meszaros 9712ea5262 Merge pull request #926 from warmbly/devin/1791630200-combined-restricted-member-security ...

feat: close all restricted-member data leaks and resource-scope escapes

2026-10-10 12:07:57 +00:00

..

handler

Merge pull request #926 from warmbly/devin/1791630200-combined-restricted-member-security

2026-10-10 12:07:57 +00:00

middleware

feat: enforce grant-scoped organization summaries and account-wide workspace creation with target membership checks for limit requests

2026-10-10 10:54:59 +00:00

cors.go

feat: move infrastructure state off dynamodb

2026-06-02 15:54:12 +02:00

resource_scope_routes_test.go

feat: add resource-scoped member access that restricts a member to selected campaign folders, campaigns and mailboxes read-only, enforced in the API route gate, SQL filters, permission trigger, realtime channels and dashboard

2026-10-09 13:34:05 +02:00

routes.go

feat: add proof-preserving one-use admin device sessions and bounded enrollment-authenticated worker evidence with scoped Kafka partition diagnostics

2026-10-10 06:14:52 +00:00

upload_limit_test.go

feat: let contact file uploads use their own 50 MB cap instead of the global 10 MB one and say when a file is too large, refuse an import list limit below one, hold an imported update to the contact size limit, keep a company logo laid out while it lazy-loads, neutralize formula cells in the sync error download, settle the draft save indicator when an edit is undone, and document the draft save route

2026-09-27 22:10:02 -07:00