P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check

2026-07-29 12:28:08 +02:00
parent 81ae5b7cb6
commit 26bf8d3a31
12 changed files with 423 additions and 39 deletions
@@ -403,4 +403,3 @@ class TestEntityPermissions:
            db_session, tenant_id, viewer_id, "contact", contact_id
        )
        assert access == "none", "Permission should be gone after cleanup"
-}