Manish Gupta 00b94d36a8 [WEB-8401] test: add unauthorized PATCH regression coverage (CodeRabbit #9483) ...

The suite covered delete/restore/rebind but not PATCH (also scoped to
created_by=request.user). Add an attacker PATCH asserting 404 + unchanged
attributes so the PATCH ownership filter can't silently regress. Fail-before
verified.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-27 12:59:47 +05:30

..

admin

…

api

[WEB-8401] test: add unauthorized PATCH regression coverage (CodeRabbit #9483)

2026-07-27 12:59:47 +05:30

live

…

proxy

…

space

…

web

…