shoc-backend/SeaHaven.DataServices
Arthur Bassi de0f6da8fb fix(work-orders): scope legacy GET GetComments by account [SH-221]
Pass ClaimsPrincipal into GetCommentsAsync and filter via
GetAllForAccountAsync so account-scoped callers cannot enumerate
cross-tenant comments. ADR + cross-account tests updated.
2026-08-11 15:18:29 -03:00
..
DependencyInjection backend changes 2026-05-14 11:00:12 -05:00
Dto refactor: enforce backend boundaries and optimize dispatch (#30) 2026-07-24 17:35:34 -03:00
Helpers !fix(work-orders): fail-closed media account scope with org_scope claim [SH-221] 2026-08-06 10:26:04 -03:00
Implementation fix(work-orders): scope legacy GET GetComments by account [SH-221] 2026-08-11 15:18:29 -03:00
Interfaces fix(work-orders): scope legacy GET GetComments by account [SH-221] 2026-08-11 15:18:29 -03:00
Models feat(vendors): add company roster management (SH-198) (#48) 2026-08-03 17:53:24 -03:00
Properties feat(vendors): add directory filters and details API (#25) 2026-07-23 15:55:47 +00:00
SeaHaven.DataServices.csproj refactor 2026-04-28 18:55:14 -05:00