- Shipped
- November 15, 2026 at 10:18 AM UTC
- Author
- Kamo
- Commit
- 24fa2d3
- Alert rules **************** detectionRules): THAT a rule was added/changed/deleted, never its values (it names the people it emails). Update/delete now refuse another organization's rule id (404) — before, any MANAGE_DETECTION_RULES holder could change or delete a rule by id across tenants. - Access Blocks **************** accessRules), from **************** so every caller is logged: an address rule's row never keeps the address (an add stays undoable by its id; a change or removal can't be put back); country rules keep their values and undo. - Disclosure (security/records/disclosure, new key disclosure) and Sign-In rules (security/sign-in/identity, signIn): values before/after as each PUT takes them back, so Undo re-PUTs the before.