test(#337): Add workspaceId verification tests for multi-tenant isolation

Browse Source

- Verify tasks.service includes workspaceId in all queries
- Verify knowledge.service includes workspaceId in all queries
- Verify projects.service includes workspaceId in all queries
- Verify events.service includes workspaceId in all queries
- Add 39 tests covering create, findAll, findOne, update, remove operations
- Document security concern: findAll accepts empty query without workspaceId
- Ensures tenant isolation is maintained at query level

Refs #337

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

...

This commit is contained in:

Jason Woltje

2026-02-05 16:14:46 -06:00

parent 721d6d15c5

commit 8d542609ff

1 changed files with 1170 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1170

apps/api/src/common/tests/workspace-isolation.spec.ts Normal file

File diff suppressed because it is too large Load Diff