Motoko ae2409ef46 fix: API token project ownership check ...

- API tokens now verify project belongs to token owner before access
- Researcher tokens only access research/general docs in owner's projects
- Developer tokens only access development/general docs in owner's projects
- Viewer tokens have read-only access to all doc types in owner's projects
- Add test for cross-user project access prevention

2026-03-31 01:56:26 +00:00

32 KiB

Raw Blame History

View Raw