Skip to content

Fix private tournament roster data leaks - #5

Draft
cursor[bot] wants to merge 1 commit into
mainfrom
cursor/critical-bug-inspection-d0ac
Draft

Fix private tournament roster data leaks#5
cursor[bot] wants to merge 1 commit into
mainfrom
cursor/critical-bug-inspection-d0ac

Conversation

@cursor

@cursor cursor Bot commented May 6, 2026

Copy link
Copy Markdown

Summary

  • Added a shared private tournament read-visibility guard matching tournament detail access rules.
  • Applied the guard to teams, entries, waitlist, team-slot waitlist, and direct team/entry reads.
  • Added focused unit coverage for public/private/member/outsider visibility decisions.

Validation

  • Attempted npm test -- tests/tournamentVisibility.test.ts and npm run typecheck, but this cloud image has no Node/npm tooling on PATH (node, npm, npx, pnpm, yarn, and corepack were unavailable).
Open in Web View Automation 

Co-authored-by: Octavio Frangipani <octapf@users.noreply.github.com>
@vercel

vercel Bot commented May 6, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
matchpoint Ready Ready Preview, Comment May 6, 2026 10:39am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant