0e6d880187
- Introduced tests for frontend URL generation in `test_client_links.py` to ensure all links in emails are reachable and correctly formatted. - Added authorization tests for deleting attachments in `test_attachment_delete_authz.py` for leads and opportunities, ensuring proper access control based on user roles and organization boundaries. - Updated `LeadAttachmentView` and `OpportunityAttachmentView` to use `get_scoped_or_404` for safer object retrieval, preventing unauthorized access to attachments across organizations. - Improved documentation regarding the organization API key and personal access tokens, clarifying their scopes and security implications. - Enhanced frontend token management to support new scope enforcement, allowing users to specify access levels when creating tokens. |
||
|---|---|---|
| .. | ||
| api | ||
| architecture | ||
| contributing | ||
| design | ||
| getting-started | ||
| integrations | ||
| mobile | ||
| reference | ||
| self-hosting | ||
| index.md | ||