claude a796577199 fix(security): restrict publish-presentation routes to project owners ...

Read-only collaborators and token-link users could publish, unpublish,
and rotate presentation share tokens. Change all three write endpoints
from ensureUserCanReadProject to ensureUserCanAdminProject so only the
project owner can perform these actions.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-19 10:17:24 +00:00

..

chat

…

clsi

Fix thumbnail quality and mobile vertical split layout

2026-06-18 13:48:44 +00:00

docstore

…

document-updater

…

filestore

…

git-bridge

…

history-v1

…

notifications

…

project-history

…

real-time

…

web

fix(security): restrict publish-presentation routes to project owners

2026-06-19 10:17:24 +00:00