Danijel Martinek e2a4657471 fix(core-dsr): scope DSR operations to the caller's own subject ...

Non-admin callers may export/rectify/restrict/delete ONLY their own
subjectId; a mismatch is rejected with FORBIDDEN instead of being
honored verbatim (IDOR, audit finding A1). Cross-subject operations
require the admin role; cascade-hard stays admin-only on top.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-10 18:25:46 +02:00

..

auth

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

blog

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-analytics

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-api

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-audit

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-cms

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-consent

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-dsr

fix(core-dsr): scope DSR operations to the caller's own subject

2026-07-10 18:25:46 +02:00

core-eslint

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

core-shared

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-testing

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-trpc

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

core-typescript

chore(core-typescript): put its TS sources under the typecheck gate

2026-07-10 17:24:09 +02:00

core-ui

build: bump vitest past GHSA-5xrq-8626-4rwp; coverage-v8 everywhere

2026-07-10 16:44:48 +02:00

marketing-pages

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

media

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00

navigation

build: align @trpc/* on a single workspace version

2026-07-10 18:25:46 +02:00