fix(tag): validate object access in tag create/delete commands - #19

Open

hbrooks wants to merge 7 commits into

Commits on May 21, 2026

fix(security): add authorization checks to tag commands

sha174n
and
claude
committed
e08dc2e
fix(security): prevent DAO access filter bypass in tag authorization
sha174n
committed
64209f9

Commits on May 22, 2026

Merge remote-tracking branch 'upstream/master' into fix/tag-api-authorization-bypass
sha174n
committed
9eaf6a6
Merge remote-tracking branch 'upstream/master' into fix/tag-api-authorization-bypass
sha174n
committed
5aef59f
address review feedback

sha174n
and
claude
committed
3f7067b

Commits on May 23, 2026

test(tags): align bulk_create test expectation with stricter access checks

sha174n
and
claude
committed
fcf2188
Merge branch 'master' into fix/tag-api-authorization-bypass
sha174n
authored
9ce7c18