29576a8

fix(security): close cross-tenant IDOR on Client/Contact/Company/Workflow/Intake

2026-09-20T07:47:25+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files16

Core0

Module0

Forbidden0

Files

api/model/contact/ContactRepository.php (api)
api/model/intake/IntakeItemRepository.php (api)
api/model/workflow/WorkflowRepository.php (api)
api/system/library/service/ClientService.php (api)
api/system/library/service/CompanyService.php (api)
api/system/library/service/ContactService.php (api)
api/system/library/service/IntakeItemService.php (api)
api/system/library/service/WorkflowService.php (api)
api/model/contact/ContactRepository.php (api)
api/model/intake/IntakeItemRepository.php (api)
api/model/workflow/WorkflowRepository.php (api)
api/system/library/service/ClientService.php (api)
api/system/library/service/CompanyService.php (api)
api/system/library/service/ContactService.php (api)
api/system/library/service/IntakeItemService.php (api)
api/system/library/service/WorkflowService.php (api)