fix(plugin-security): PermissionDeniedError carries status beside statusCode, so a share-link permission refusal answers 403 at both doors - #21429

Merged

objectstack-fleet[bot] merged 6 commits into

mainfrom

claude/issue-21405-permission-denied-status

Oct 2, 2026

Commits on Oct 2, 2026

fix(plugin-security): PermissionDeniedError declares status beside statusCode
claude
committed
b7fdf64
Merge remote-tracking branch 'origin/main' into claude/issue-21405-permission-denied-status
claude
committed
0ceb544
test(dogfood): pin the share-link create refusal alone once the member's list is self-scoped
claude
committed
46b09ea
test(runtime): pin one share-link refusal through both doors beside the dispatcher domain
claude
committed
d9f9aab
docs(permissions): the field-write denial example shows status beside statusCode
claude
committed
1c68c42
Revert the field-write denial example edit
claude
committed
01bb1de