Cursor Agent 7a876ec334 refactor(notifications): bell loaders read through owner access, no bypass ... countUnreadNotifications/loadNotificationList took a caller-supplied recipientID with module-level admin bypass — one misuse away from reading someone else's inbox. They now take the actor (CampaignUser) and read with overrideAccess: false under canReadOwnNotifications, keeping the explicit recipient filter as a second fence. Pin: owner isolation at the loader level in campaignNotifications.int.spec.ts. Co-authored-by: Francisco Solla <fsolla@users.noreply.github.com>		2026-07-31 20:57:18 -03:00
..
e2e	test(miss-53): gate WebAuthn ceremonies on authenticator readiness	2026-07-31 20:57:18 -03:00
fixtures	Remodel the campaign vertical from Praça to Município	2026-07-23 21:36:20 -03:00
helpers	A6 — Dobradinha 2026 automática quando o TSE publicar candidaturas (pós-15/08) (#82)	2026-07-31 00:14:27 -03:00
int	refactor(notifications): bell loaders read through owner access, no bypass	2026-07-31 20:57:18 -03:00
unit	security: lock public globals update to payloadAdminOnly (Pass 4 P0)	2026-07-31 20:57:18 -03:00