CedarCopilot/cedar-mail

Branch: staging

fix(auth): close chat-thread cross-user IDOR, restore admin scope on Brain playbook nav

merged#2766CedarCopilot

CedarCopilot wants to merge 1 commit into staging from fix/chat-thread-cross-user-idor

Libra does not show diffs here. View the full diff on GitHub.

modifiedapps/mail/app/(routes)/brain/playbooks/page.tsx+2-1
modifiedapps/mail/modules/documents/playbook/CompositePlaybookDocument.tsx+3-3
modifiedapps/mail/modules/documents/playbook/PlaybookDocument.tsx+3-3
modifiedapps/mail/modules/documents/playbook/useSubagentCreation.tsx+2-2
modifiedapps/server/src/services/auth/authorize.ts+11-0db.getConnectionRecordaws-primary.syncThread
addedapps/server/src/trpc/routes/__tests__/chat-router-org-admin.test.ts+273-0
modifiedapps/server/src/trpc/routes/chat.ts+65-10