Files
plane/apps/api
Manish Gupta 90b6416ebf [WEB-8066] harden: scope asset project-membership check to the asset's workspace
Address Copilot review: filter ProjectMember by workspace_id=asset.workspace_id
in addition to project_id, mirroring allow_permission's PROJECT branch. Prevents
a member of the same project in a different workspace from passing the check if
an asset row is ever inconsistent (asset.workspace_id != project.workspace_id).

Co-authored-by: Plane AI <noreply@plane.so>
2026-07-08 14:03:20 +05:30
..
2026-01-27 13:54:22 +05:30
2026-01-27 13:54:22 +05:30