wizardchen db9bdc27cd fix(session): scope API runtime admin-console bypass to owned sessions ...

Replace the broad channel-runtime principal check with owner-scoped rules so
API callers can still read their own api_tenant_key and api_external_user
sessions without opening IM sessions matched via legacy empty user_id scope.

2026-07-30 11:56:05 +08:00

..

repository

fix(session): include external users in API session group

2026-07-30 11:56:05 +08:00

service

fix(session): scope API runtime admin-console bypass to owned sessions

2026-07-30 11:56:05 +08:00