Ruben Fiszel 70359e3a76 fix(schedules): apply scope-path filtering to schedule list endpoints (#10192) ...

`list_schedule` and `list_schedule_with_jobs` returned every schedule in
the workspace regardless of the token's declared scope. A token limited
to `schedules:read:<prefix>/*` could enumerate all schedule paths (and
their script paths, cron expressions and recent job outcomes) through
these two endpoints, while `get_schedule` correctly rejected them.

Apply `build_scope_path_predicate(&authed, "schedules", "read")` to the
returned rows, mirroring scripts, flows, apps, resources and variables.
In `list_schedule` the filter runs after the draft-only append so both
deployed and draft rows are covered.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-20 07:32:52 +02:00

..

src

fix(schedules): apply scope-path filtering to schedule list endpoints (#10192)

2026-07-20 07:32:52 +02:00

Cargo.toml

refactor: extract 12 leaf crates from windmill-api (#7899)

2026-02-11 10:31:03 +00:00