Repository navigation

🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API - #582

Draft

seonghobae wants to merge 24 commits into

mainfrom

fix-admin-auth-13895687966802332716

Draft

🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API#582
seonghobae wants to merge 24 commits into
mainfrom
fix-admin-auth-13895687966802332716

Commits on Sep 12, 2026
- 🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API
  seonghobae
  committed
  4de2d01
- 🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API
  seonghobae
  committed
  69902f0
- chore: remove one-shot source patch artifact
  seonghobae
  committed
  2e3c54e
- chore: remove source replacement scratch file
  seonghobae
  committed
  7ffe9c0
- chore: remove source search scratch file
  seonghobae
  committed
  1e8c18e
- test(admin): enforce tenant isolation on privileged routes
  seonghobae
  committed
  1133ce6
- fix(admin): preserve tenant boundary on privileged routes
  seonghobae
  committed
  95df70e
- test(admin): model foreign-tenant rejection in access service
  seonghobae
  committed
  0ee5e83
- docs(security): record admin tenant-isolation boundary
  seonghobae
  committed
  6f37e74
- test(admin): cover retry disappearance race
  seonghobae
  committed
  daa87ca
- 🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API
  seonghobae
  committed
  fbb00e4
- chore: remove reintroduced source patch artifact
  seonghobae
  committed
  9b17b60
- chore: remove reintroduced replacement scratch file
  seonghobae
  committed
  f7ae2be
- chore: remove reintroduced search scratch file
  seonghobae
  committed
  6875c64
- fix(admin): preserve retry not-found race contract
  seonghobae
  committed
  315bd07
- test(admin): cover tenant and retry boundary races
  seonghobae
  committed
  ea7425f
- 🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API
  seonghobae
  committed
  8ebdbfd
- 🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API
  seonghobae
  committed
  b6d1b93
- test(auth): preserve 404 when retry target disappears
  seonghobae
  committed
  c54e104
- fix(auth): preserve not-found retry race semantics
  seonghobae
  committed
  16fb346
- 🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API
  seonghobae
  committed
  a66c8c1
Commits on Sep 13, 2026

Navigation Menu

Repository navigation

🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API - #582

🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API#582
seonghobae wants to merge 24 commits into
mainfrom
fix-admin-auth-13895687966802332716

Commits on Sep 12, 2026

🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API

🛡️ Sentinel: [CRITICAL] Fix authorization bypass in admin API

chore: remove one-shot source patch artifact

chore: remove source replacement scratch file

chore: remove source search scratch file

test(admin): enforce tenant isolation on privileged routes

fix(admin): preserve tenant boundary on privileged routes

test(admin): model foreign-tenant rejection in access service

docs(security): record admin tenant-isolation boundary

test(admin): cover retry disappearance race

🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API

chore: remove reintroduced source patch artifact

chore: remove reintroduced replacement scratch file

chore: remove reintroduced search scratch file

fix(admin): preserve retry not-found race contract

test(admin): cover tenant and retry boundary races

🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API

🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API

test(auth): preserve 404 when retry target disappears

fix(auth): preserve not-found retry race semantics

🛡️ Sentinel: [CRITICAL] Enforce tenant isolation in admin API

Commits on Sep 13, 2026

Fix missing authorization and tenant isolation in AdminController

Fix missing authorization and tenant isolation in AdminController

Fix missing authorization and tenant isolation in AdminController