Jason Woltje 06de72a355 fix(#338): Implement proper system admin role separate from workspace ownership ...

- Replace workspace ownership check with explicit SYSTEM_ADMIN_IDS env var
- System admin access is now explicit and configurable via environment
- Workspace owners no longer automatically get system admin privileges
- Add 15 unit tests verifying security separation
- Add SYSTEM_ADMIN_IDS documentation to .env.example

Refs #338

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-05 16:44:50 -06:00

1.8 KiB

Raw Blame History

View Raw