mirror of
https://github.com/makeplane/plane.git
synced 2026-09-02 03:59:00 +02:00
The negative cases all used a different workspace, so they'd pass even if the project predicate were dropped from get_queryset (workspace slug alone would catch them). Add a board for a different project in the SAME workspace and assert it 404s via project_a's URL, guarding the project_id/entity_identifier scope. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>