Security: enforce object-level authorization across the ability services (1.4.0) - #25

Merged

trueqap merged 5 commits into

mainfrom

fix/object-level-authorization

Aug 7, 2026

Commits on Aug 7, 2026

Enforce object-level authorization across the ability services
trueqap
committed
52b1607
Constrain delete-theme to installed themes
trueqap
committed
ca48332
Bump to 1.4.0 (object-level authorization security release)
trueqap
committed
7f4b9a6
Filter protected post meta from get-post, and keep failed_ids schema-valid
trueqap
committed
51d4b5f
docs: record the two live-test findings in the 1.4.0 changelog
trueqap
committed
eae6b89