Ernest Hysa f5c9095222 fix(document): add 404 guard to version list/get endpoints (#2762) ...

list_versions and get_version used a soft 'if doc:' guard that skipped
ownership verification when the Document row was missing (e.g. after
hard delete). Orphaned DocumentVersion rows would be returned to any
caller without auth. Now raises 404 when the parent document is gone,
matching the pattern already used in restore_version.

2026-06-05 15:12:40 +02:00

73 KiB

Raw Blame History

View Raw