Files
resolutionflow/backend/app/api/endpoints/uploads.py
chihlasm aa8d555cb6 fix: return 404 instead of 403 for cross-tenant upload access
get_upload_url and delete_upload now return 404 when the upload belongs to
a different account/user, preventing resource existence confirmation.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-09 04:02:04 +00:00

12 KiB