>_
.issue.db
/highway-workflow-engine
Dashboard
Issues
Memory
Lessons
Audit Log
New Issue
Edit Issue #800
Update issue details
Title *
Description
Issue C: Defense-in-depth - replay.py line 67 queried workflow_run without tenant_id filter. While ReplayLoader later uses tenant_id, the initial DB lookup should also validate tenant ownership. Fix: Added AND tenant_id = %s to all 3 workflow lookup queries using g.tenant_id. Files modified: api/blueprints/v1/replay.py
Priority
Low
Medium
High
Critical
Status
Open
In Progress
Closed
Won't Do
Due Date (YYYY-MM-DD)
Tags (comma separated)
Related Issues (IDs)
Enter IDs of issues related to this one. They will be linked as 'related'.
Update Issue
Cancel