Andrey Antukh 2e8cdac124 🐛 Add authorization checks to WebSocket subscriptions
Subscribe-file and subscribe-team handlers now verify the requesting
profile has read permissions on the target resource before creating
a subscription. Pointer-update handler now validates that the message
file-id matches the subscribed file-id before publishing.

Closes #11067

AI-assisted-by: mimo-v2.5-pro
2026-08-04 13:30:50 +00:00
..