senke/veza
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
veza/veza-backend-api/internal
History
senke b01d21f030 [BE-SEC-003] security: Fix ownership verification for playlist updates/deletes 
- Added RequireOwnershipOrAdmin middleware to PUT/DELETE /playlists/:id routes
- Created playlistOwnerResolver that loads playlist from DB and returns owner user_id
- Service already handles ownership checks and collaborator permissions
- All existing integration tests pass (TestUpdatePlaylist_AsOwner, TestUpdatePlaylist_NotOwner, TestDeletePlaylist_AsOwner, TestDeletePlaylist_NotOwner)

Phase: PHASE-1
Priority: P0
Progress: 3/267 (1.1%)
2025-12-23 01:37:56 +01:00
..
api [BE-SEC-003] security: Fix ownership verification for playlist updates/deletes 2025-12-23 01:37:56 +01:00
common refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
config stabilizing apps/web: THIRD BATCH - FIXED Playwright 2025-12-21 18:55:51 -05:00
core [BE-SEC-002] security: Fix ownership verification for track updates/deletes 2025-12-23 01:37:10 +01:00
database stabilizing apps/web: THIRD BATCH - FIXED Playwright 2025-12-21 18:55:51 -05:00
dto refonte: backend-api go first; phase 1 2025-12-12 21:34:34 -05:00
email STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
errors refactor(marketplace): enforce unified api response envelope 2025-12-06 17:39:04 +01:00
eventbus adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
features adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
handlers [BE-SEC-001] security: Fix ownership verification for user profile updates 2025-12-23 01:36:04 +01:00
infrastructure STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
interfaces adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
jobs STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
logging adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
metrics stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
middleware fix(MVP-014): Add CORS credentials configuration validation 2025-12-22 23:17:24 +01:00
models stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
monitoring stabilizing veza-backend-api: P1 & P2 2025-12-16 13:34:08 -05:00
repositories stabilizing apps/web: THIRD BATCH - FIXED Playwright 2025-12-21 18:55:51 -05:00
repository adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
response stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
security adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
services stabilizing apps/web: THIRD BATCH - FIXED Playwright 2025-12-21 18:55:51 -05:00
testutils stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00
types adding initial backend API (Go) 2025-12-03 20:29:37 +01:00
utils P0 UUID Phase A: migrations + backend Go UUID refactor 2025-12-04 02:15:48 +01:00
validators STABILISATION: phase 3–5 – API contract, tests & chat-server hardening 2025-12-06 17:21:59 +01:00
workers stabilizing veza-backend-api: phase 1 2025-12-16 11:23:49 -05:00