Use Repo.get_by(schema, id: id, organization_id: organization_id) instead of Repo.get + pattern match so that resources from wrong orgs return :not_found instead of :forbidden, preventing org membership discovery. |
||
|---|---|---|
| .. | ||
| v1 | ||
| account_data_controller_test.exs | ||
| mobile_auth_controller_test.exs | ||
| mobile_controller_test.exs | ||