[WEB-7776] fix(security): scope FileAsset queries to prevent cross-project IDOR (Cluster F)#9288

Merged

dheeru0198 merged 3 commits into

web-7776/fix-asset-idor

Jun 30, 2026

Commits on Jun 22, 2026

[WEB-7776] fix(security): scope FileAsset queries to prevent cross-project IDOR (Cluster F)

mguptahub
and
Plane AI
committed

Commits on Jun 24, 2026

refactor(security): replace inline membership checks with WorkspaceMemberPermission class

mguptahub
and
Plane AI
committed
refactor: remove dead 404 guard in FileAssetEndpoint.post()

mguptahub
and
Plane AI
committed