feat: add VisibilityFilteredAssetRepository decorator for automatic access control on asset queries

2026-05-31 19:06:49 +02:00
parent 0b2237860e
commit b5cda3afeb
6 changed files with 358 additions and 7 deletions
--- a/crates/application/tests/catalog/queries/get_timeline.rs
+++ b/crates/application/tests/catalog/queries/get_timeline.rs
@@ -31,6 +31,7 @@ async fn returns_paginated_assets() {
    let page = handler
        .execute(GetTimelineQuery {
            owner_id: owner,
+            caller_id: None,
            limit: 3,
            offset: 0,
        })
@@ -50,6 +51,7 @@ async fn returns_empty_for_no_assets() {
    let page = handler
        .execute(GetTimelineQuery {
            owner_id: SystemId::new(),
+            caller_id: None,
            limit: 10,
            offset: 0,
        })