P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check

2026-07-29 12:28:08 +02:00
parent 81ae5b7cb6
commit 26bf8d3a31
12 changed files with 423 additions and 39 deletions
@@ -286,4 +286,3 @@ class TestPermissionPerformance:
        assert elapsed < 3.0, f"get_visible_ids with mixed ownership took {elapsed:.3f}s (expected <3.0s)"
        # Viewer should see: 200 shared + 300 tenant-owned = 500
        assert len(visible) >= 500, f"Expected >=500 visible, got {len(visible)}"
-}