[WEB-8400] fix(security): scope DeployBoardViewSet queryset to the URL workspace/project - #9481

Open

mguptahub wants to merge 3 commits into

web-8400/deploy-board-cross-workspace-idor

Commits on Jul 27, 2026

[WEB-8400] fix(security): scope DeployBoardViewSet queryset to the URL workspace/project (GHSA-h4w5-vhxc-265g)

mguptahub
and
claude
committed
834ee3c
[WEB-8400] test: cover same-workspace/other-project board scope (CodeRabbit #9481)

mguptahub
and
claude
committed
000175c

Commits on Aug 7, 2026

chore(security): drop advisory identifiers from code comments

mguptahub
and
Plane AI
committed
3639e02