security: round 2 — multi-tenancy isolation (OrganisationScope, scoped validation, boundary checks)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-14 06:38:19 +02:00
parent 1028498705
commit 090d2b7d89
40 changed files with 603 additions and 64 deletions
--- a/api/tests/Feature/Api/V1/EventImageUploadTest.php
+++ b/api/tests/Feature/Api/V1/EventImageUploadTest.php
@@ -134,7 +134,7 @@ class EventImageUploadTest extends TestCase
            ]
        );

-        $response->assertForbidden();
+        $response->assertNotFound();
    }

    public function test_registration_data_includes_branding_fields(): void