>_
.issue.db
/highway-workflow-engine
Dashboard
Issues
Memory
Lessons
Audit Log
New Issue
Edit Issue #799
Update issue details
Title *
Description
Issue B: CRITICAL SECURITY - The activities.py list endpoint did NOT filter by tenant_id, allowing any tenant to see ALL activities from ALL tenants. Affected queries: - Main query (line 534): No tenant filter - Count query (line 562): No tenant filter and no JOIN Fix: Added wr.tenant_id filter to both queries using g.tenant_id from middleware. Files modified: api/blueprints/v1/activities.py
Priority
Low
Medium
High
Critical
Status
Open
In Progress
Closed
Won't Do
Due Date (YYYY-MM-DD)
Tags (comma separated)
Related Issues (IDs)
Enter IDs of issues related to this one. They will be linked as 'related'.
Update Issue
Cancel