Skip to content

Fix private tournament roster read bypass - #7

Draft
cursor[bot] wants to merge 2 commits into
mainfrom
cursor/critical-bug-inspection-7813
Draft

Fix private tournament roster read bypass#7
cursor[bot] wants to merge 2 commits into
mainfrom
cursor/critical-bug-inspection-7813

Conversation

@cursor

@cursor cursor Bot commented May 10, 2026

Copy link
Copy Markdown

Summary

  • Add a shared tournament readability guard for private tournament access checks
  • Apply the guard to entries, teams, waitlist, team-slot waitlist, and GET-by-id roster endpoints
  • Reuse the guard in tournament detail and add unit coverage for public/private/organizer/member/outsider cases

Validation

  • npm test -- tests/tournamentVisibility.test.ts
  • npm run typecheck
  • npm run verify
Open in Web View Automation 

cursoragent and others added 2 commits May 10, 2026 10:06
Co-authored-by: Octavio Frangipani <octapf@users.noreply.github.com>
Co-authored-by: Octavio Frangipani <octapf@users.noreply.github.com>
@vercel

vercel Bot commented May 10, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
matchpoint Ready Ready Preview, Comment May 10, 2026 11:12am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant