test(M2-007): cross-user data isolation integration test #305

Merged
jason.woltje merged 1 commits from test/m2-cross-user-isolation into main 2026-03-21 21:16:51 +00:00

1 Commits

Author SHA1 Message Date
b5227c1785 test(M2-007): add cross-user isolation integration test
Some checks failed
ci/woodpecker/push/ci Pipeline failed
ci/woodpecker/pr/ci Pipeline failed
Creates two real DB users with conversations, messages, agent configs,
preferences, and insights, then verifies that every repository query path
(ConversationsRepo, AgentsRepo, PreferencesRepo, InsightsRepo) returns only
data belonging to the requesting user.

28 tests cover: own-data access, cross-user read isolation, cross-user write
prevention, system-agent visibility for all users, and vector-search scoping.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-21 16:08:02 -05:00