fix(capture): require write access for board attachment - #3310

Merged

Chris0Jeky merged 18 commits into

mainfrom

codex/3291-capture-board-write-auth

Sep 22, 2026

Commits on Sep 22, 2026

test(capture): reproduce Viewer board-attachment authorization gap
Chris0Jeky
committed
5ced929
test(capture): add authenticated Viewer attachment negative
Chris0Jeky
committed
770b487
fix(capture): require write access for board attachment
Chris0Jeky
committed
ff77d8a
test(capture): import shared error codes
Chris0Jeky
committed
553ad71
test(capture): align dual-write fixture with write authorization
Chris0Jeky
committed
cac5fe0
test(capture): keep authorization usernames within contract
Chris0Jeky
committed
2026199
test(capture): align fixtures with write authorization
Chris0Jeky
committed
3311e01
fix(capture): serialize board authorization with enqueue
Chris0Jeky
committed
a38a890
fix(capture): hide board entry points for viewers
Chris0Jeky
committed
86eca5d
fix(capture): hide column capture for viewers
Chris0Jeky
committed
e336ccb
fix(auth): refresh tracked board access before capture
Chris0Jeky
committed
0a77af8
fix: protect queued capture board writes
Chris0Jeky
committed
34fb5c8
test(frontend): align BoardView fixture with write capability
Chris0Jeky
committed
f642869
test(api): reload board access before mutation
Chris0Jeky
committed
aec449b
fix(inbox): gate scoped capture by board write access
Chris0Jeky
committed
f06012f
fix(queue): normalize capture request types before authorization
Chris0Jeky
committed
2dac12e
Fix scoped Inbox capture escape hatch
Chris0Jeky
committed
7704fb1
Preserve direct nib capture callers
Chris0Jeky
committed
3c37b19