chihlasm 8a4c870cd9 test: add cross-tenant isolation tests for Task 6 UUID audit ...

Tests cover:
- Tree GET/PUT returns 404 for cross-account access
- Session GET returns 404 for cross-user access
- AI session GET returns 404 for cross-user access
- AI session retry-psa-push requires ownership
- Upload URL returns 404 for cross-account access
- Share revoke returns 404 for cross-user access

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-09 04:02:14 +00:00

14 KiB

Raw Blame History

View Raw