domverse/photoanalyzer
1
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

US07-02: Harden API Authorization and Path Boundaries #84

Merged
domverse merged 1 commits from us/US07-02-harden-api-authorization-and-path-boundaries into main 2026-08-16 23:07:37 +02:00
Conversation 0 Commits 1 Files Changed 21 +1134 -34
domverse commented 2026-08-16 23:06:46 +02:00
Owner
Copy Link

Implements #39

Tests:

  • work_item/scripts/python -m unittest discover -s work_item/tests -v
  • work_item/scripts/python -m pytest tests -q
  • work_item/scripts/python -m pytest tests/unit/test_security_policy.py tests/integration/test_security_boundaries.py tests/e2e/test_security.py -q

Commit: b2b996b37e668b985af997f3998f0b465b377a0d

Implements #39 Tests: - `work_item/scripts/python -m unittest discover -s work_item/tests -v` - `work_item/scripts/python -m pytest tests -q` - `work_item/scripts/python -m pytest tests/unit/test_security_policy.py tests/integration/test_security_boundaries.py tests/e2e/test_security.py -q` Commit: `b2b996b37e668b985af997f3998f0b465b377a0d`
domverse added 1 commit 2026-08-16 23:06:47 +02:00
US07-02: Harden API Authorization and Path Boundaries b2b996b37e
domverse merged commit d2e44b5657 into main 2026-08-16 23:07:37 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/backend
Backend services, jobs, or API
 area/database
Schema, persistence, migration, or queries
 area/filesystem
Filesystem identity, mutation, or storage
 area/frontend
Browser UI and client-side application
 area/integration
External tools or provider integrations
 area/testing
Automated test suites, fixtures, and tooling
 priority/critical
Release-blocking safety or correctness
 priority/high
Important phase outcome
 priority/normal
Normal planned work
 status/backlog
Awaiting dependency eligibility or prioritization
 status/blocked
Cannot proceed without an explicit resolution
 status/done
Merged, tested, and completed
 status/in-progress
Currently being implemented
 status/ready
Eligible to be claimed
 status/review
Submitted in a pull request for review
 type/feature
User-facing or domain capability
 type/hardening
Security, resilience, operations, or release hardening
 type/migration
Donor extraction, migration, or legacy consolidation
 type/test
Automated test infrastructure or acceptance coverage
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
domverse
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: domverse/photoanalyzer#84
Delete Branch "us/US07-02-harden-api-authorization-and-path-boundaries"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?