Guilhem LemouelandClaude Opus 5.5 e35c25ef9c fix: check a move's writes with the rights its token carries in the target ...

The transfer re-authenticated the token against the target but then checked
writes with the user's database membership there, so a JWT whose claims are
narrower than that membership could copy a draft to a path it cannot save to
directly. The identity the re-authentication returns is now the one the
checks and the copy use.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 02:57:10 -07:00

..

src

fix: check a move's writes with the rights its token carries in the target

2026-10-29 02:57:10 -07:00

Cargo.toml

test: drop empty doctest and lib-test targets, ignore service tests (#11852)

2026-10-17 22:30:42 +02:00