Katia Bulatova 5aef047d87 fix(webapp): cap the query API's scope at the credential's environment ...

/api/v1/query took its tenant scope from the request body, so a public access
token minted for one environment could read the whole organization by asking for
organization scope. The credential is now the ceiling and a wider ask is refused;
secret keys and the membership-authorized Query page are unchanged.

2026-08-05 21:13:40 +00:00

..

supervisor

fix(supervisor): hold the last backpressure verdict when a read fails (#4444)

2026-08-03 18:06:23 +02:00

webapp

fix(webapp): cap the query API's scope at the credential's environment

2026-08-05 21:13:40 +00:00