morz-infoboard/server/backend/internal
Jesko Anschütz cc9ca2cd81 fix: nil-pointer in DeleteMediaUI, restricted delete-check in tenant handler, SCHEMA fix
- HandleDeleteMediaUI: check err after media.Get before using asset (prevents nil-pointer panic)
- HandleTenantDeleteMedia: add restricted-user ownership check (K3)
- HandleTenantDashboard: filter media list by ownerUserID for restricted users
- SCHEMA.md: correct created_by_user_id to 'text null ... on delete set null'

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-28 09:18:12 +01:00
..
app feat(wiring): GlobalOverrideStore in Router, App und Scheduler-Goroutinen 2026-03-27 20:19:03 +01:00
campaigns/messagewall Pruefe Layout-Validierung systematischer 2026-03-22 17:42:30 +01:00
config Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
db feat(db): created_by_user_id zu media_assets hinzufügen 2026-03-28 09:01:00 +01:00
fileutil Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
httpapi fix: nil-pointer in DeleteMediaUI, restricted delete-check in tenant handler, SCHEMA fix 2026-03-28 09:18:12 +01:00
mqttnotifier fix(display): screen UUID lookup, authScreen middleware, JSON encoding 2026-03-26 23:35:05 +01:00
reqcontext Security-Review + Phase 6: CSRF, Rate-Limiting, Tenant-Isolation, Screenshot, Ansible 2026-03-23 21:06:35 +01:00
scheduler feat(scheduler): check() unterdrückt display_on bei Wochenende/Override 2026-03-27 20:15:21 +01:00
store feat(store): MediaAsset-Ownership — List/Create/Get mit created_by_user_id 2026-03-28 09:03:44 +01:00