Fail-closed tenant guard on underwriting waivers/validations

FixSecurityService
Ya
2 Julai 2026, 23:12 UTC
Mwandishi
Kamo
Ahadi ya
1be94f2

Review found the org guard was a no-op on the common empty-list case for the by-id waivers/validations reads (which the MLOS service does not org-filter), leaking cross-org run existence + finding UUID. Now verify run ownership via the org-bearing detail read before serving, and fail closed on any unconfirmable 2xx shape. Same fail-closed hardening applied to the capital-markets by-id guard. Also: service-agnostic upstream-error message; god-eligible (not active) wording.

Mabadiliko yote

Je, unaona nini kuhusu usafiri?

Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.

Kuwa Huru MileleMtazamo wa bei