feat: tenant isolation Phase 0 — app-layer filters, UUID audit, CI gate #132

Merged
chihlasm merged 22 commits from feat/tenant-isolation-phase-0 into main 2026-04-09 04:42:19 +00:00
Showing only changes of commit 33a4710d53 - Show all commits

View File

@@ -105,8 +105,8 @@ async def get_tag(
# Check access: global tags visible to all, account tags only to account members # Check access: global tags visible to all, account tags only to account members
if tag.account_id and tag.account_id != current_user.account_id and not current_user.is_super_admin: if tag.account_id and tag.account_id != current_user.account_id and not current_user.is_super_admin:
raise HTTPException( raise HTTPException(
status_code=status.HTTP_403_FORBIDDEN, status_code=status.HTTP_404_NOT_FOUND,
detail="You don't have access to this tag" detail="Tag not found"
) )
return TagResponse.model_validate(tag) return TagResponse.model_validate(tag)