xarmian 7eff417d83 fix(server): deny restricted owners from escalating collection access (BUG-1925) (#815) ...

handleSetMemberCollectionAccess gated only on requireRole(r, "owner"), with
no validation of the caller's own visibility. member_collection_access has
no role exclusion (BUG-1920), so a workspace-role owner independently
restricted via collection_access="specific" could PATCH themselves (or any
other member) to mode="all", or grant a collection outside their own
visible set — defeating the entire BUG-1917/1918/1920/1921 visibility
family plus the BUG-1922 export gate in one authenticated request.

requireCallerCanSetCollectionAccess now denies a restricted caller from
setting mode="all" for any target, and validates every requested
collection ID against the caller's own visible set, narrowed to
guestResourceFilter's fullCollIDs (mirroring requireCollectionFullyVisible,
BUG-1920 codex R2) so an item-level grant can't be escalated into
collection-wide access. Unrestricted callers are unaffected.

2026-07-04 14:39:33 -04:00

..

artifact

feat(artifact): MD+frontmatter export/import core for playbooks & conventions (#754)

2026-06-22 11:07:37 -04:00

attachments

fix(ci): gofmt + bump race-detector timeout to 30m (#299)

2026-04-29 15:41:12 -04:00

billing

feat(admin): add /api/v1/admin/billing-stats proxy + cloud client (TASK-827) (#266)

2026-04-27 14:42:53 -04:00

cli

fix(cli): detect machine-level agent tools, not just project-local (BUG-1156) (#783)

2026-07-02 22:05:46 -04:00

cmdhelp

feat(cmdhelp): tests + golden contract + drift validator (TASK-938) (#332)

2026-05-01 07:17:58 -04:00

collab

fix(collab): dedup binary frames by content in replay-cursor test (BUG-1924) (#797)

2026-07-03 18:56:26 -04:00

collections

test(collections): drift-guard for NL-canonical playbook invocation (TASK-1862) (#752)

2026-06-21 15:36:47 -04:00

config

fix(server): auth-perimeter hardening — B6–B9 from the IDEA-1927 audit (TASK-1932) (#811)

2026-07-04 11:33:18 -04:00

diff

Initial release

2026-03-26 01:52:36 +00:00

email

feat(store): email_verification_tokens + SendEmailVerification + token reaper (TASK-1936) (#806)

2026-07-04 01:19:41 -04:00

events

feat(api): bulk-mutation endpoint + single SSE batch event (TASK-1668) (#669)

2026-05-30 18:41:55 -04:00

items

feat(playbooks): add invocation_slug + arguments schema fields (TASK-1378) (#517)

2026-05-12 17:17:56 -04:00

links

feat(backlinks): cross-workspace wiki-links + request-independent ACL (Phase 2b) (#622)

2026-05-24 13:27:40 -04:00

logging

feat: add readiness probe and structured logging (TASK-161)

2026-04-05 15:02:54 +00:00

mcp

feat(server): RequireVerifiedEmail enforcement across all mutation perimeters (TASK-1937) (#807)

2026-07-04 02:06:58 -04:00

metrics

feat(metrics): MCP + OAuth observability metrics for /mcp (TASK-961) (#398)

2026-05-03 16:37:49 -04:00

models

feat(store): email_verification_tokens + SendEmailVerification + token reaper (TASK-1936) (#806)

2026-07-04 01:19:41 -04:00

oauth

perf(test): wire remaining store helpers onto storetest fixture (TASK-1915) (#789)

2026-07-03 12:17:03 -04:00

server

fix(server): deny restricted owners from escalating collection access (BUG-1925) (#815)

2026-07-04 14:39:33 -04:00

store

feat(server): cloud email self-registration + verify-email/resend endpoints (TASK-1938) (#808)

2026-07-04 03:32:48 -04:00

urlimport

feat(urlimport): OpenAPI 3.x → Markdown converter (TASK-1471) (#555)

2026-05-15 00:24:14 -04:00

webhooks

feat: rebrand to Perpetual Software + new tagline (IDEA-832) (#273)

2026-04-28 12:26:39 -04:00