From f339ec5d2eef03c82ade1fb4c1dcc96a588b9642 Mon Sep 17 00:00:00 2001 From: cryppadotta <34892728+cryppadotta@users.noreply.github.com> Date: Wed, 9 Sep 2026 08:03:29 +0000 Subject: [PATCH] fix(security): inventory denied company wildcard Co-Authored-By: Paperclip --- server/src/security/board-key-route-inventory.ts | 1 + 1 file changed, 1 insertion(+) diff --git a/server/src/security/board-key-route-inventory.ts b/server/src/security/board-key-route-inventory.ts index 1386ef641f..454a359413 100644 --- a/server/src/security/board-key-route-inventory.ts +++ b/server/src/security/board-key-route-inventory.ts @@ -247,6 +247,7 @@ export const BOARD_KEY_ROUTE_INVENTORY: readonly string[] = [ "board_key_denied | deny | /api/companies/{id}/users/me/inbox-agent-policy", "board_key_denied | deny | /api/companies/{id}/users/{id}/inbox-agent-policy", "board_key_denied | deny | /api/companies/{id}/users/{id}/profile", + "board_key_denied | deny | /api/companies/{id}/{*path}", "board_key_denied | deny | /api/connection-intents/{*path}", "board_key_denied | deny | /api/feedback-traces/{*path}", "board_key_denied | deny | /api/health/{*path}",