Cursor Agent 7a876ec334 refactor(notifications): bell loaders read through owner access, no bypass ... countUnreadNotifications/loadNotificationList took a caller-supplied recipientID with module-level admin bypass — one misuse away from reading someone else's inbox. They now take the actor (CampaignUser) and read with overrideAccess: false under canReadOwnNotifications, keeping the explicit recipient filter as a second fence. Pin: owner isolation at the loader level in campaignNotifications.int.spec.ts. Co-authored-by: Francisco Solla <fsolla@users.noreply.github.com>		2026-07-31 20:57:18 -03:00
..
createCampaignNotification.ts	D2 — Push + sino in-app para /campanha	2026-07-31 01:51:41 +00:00
notificationEvents.ts	D2 — skip notification hooks in Vitest; fixture cleanup for push rows	2026-07-31 02:09:52 +00:00
notificationList.ts	refactor(notifications): bell loaders read through owner access, no bypass	2026-07-31 20:57:18 -03:00
notificationRecipients.ts	D2 — Push + sino in-app para /campanha	2026-07-31 01:51:41 +00:00
sendCampaignPush.ts	D2 — Push + sino in-app para /campanha	2026-07-31 01:51:41 +00:00