Oliver Kieselbach 15cd5fd140 fix(delegated): bind SignalR notify-group authz to the group tenant (home-role escalation) ...

The tenant notification-group join/leave checks gated on the caller's HOME-tenant role
(IsTenantAdmin / IsTenantMemberOrGlobalAdmin) without verifying the group belonged to that
tenant. Once this branch admits a cross-tenant delegated ("MSP") reader past the broadcast
cross-tenant gate, a home-tenant Admin/member role let them join a DIFFERENT (managed)
tenant's admin/member notify group and receive its higher-tier notification pushes -
breaking the documented "delegated caller gets no notification pushes" contract.

Fix: a single pure gate SignalRGroupHelper.CheckNotifyGroupAccess binds the role to the
GROUP's tenant - admin tier = (sameTenant && IsTenantAdmin) || IsGlobalAdmin; member tier =
(sameTenant && IsTenantMemberRole) || HasGlobalScope. Add/Remove both call it (symmetric).
Preserves own-tenant Admin/member, GA cross-tenant, and GlobalReader cross-tenant member
read; closes the same latent gap for a GlobalReader who is also home-admin.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-26 19:38:00 +02:00

..

AuthFunction.cs

fix(backend): don't onboard MSP home tenant on delegated-only login [Phase 3a follow-up]

2026-06-25 21:49:53 +02:00

HealthCheckFunction.cs

feat(health): non-blocking MCP card with wake-aware cold-start handling

2026-05-31 16:16:35 +02:00

McpUserFunction.cs

feat(mcp): delegated-admin (MSP) support over MCP — tenant-bounded cross-tenant reads

2026-06-26 10:54:45 +02:00

SignalRAddToGroupFunction.cs

fix(delegated): bind SignalR notify-group authz to the group tenant (home-role escalation)

2026-06-26 19:38:00 +02:00

SignalRNegotiateFunction.cs

massive re-org and re-structuring

2026-03-06 03:02:19 +01:00

SignalRRemoveFromGroupFunction.cs

fix(delegated): bind SignalR notify-group authz to the group tenant (home-role escalation)

2026-06-26 19:38:00 +02:00