feat(knowledge_base): wire client_specific company scoping write path #260

Merged

vas2000-work merged 1 commit from feat/pms-341-kb-company-ids into main

2026-06-16 23:49:24 +02:00

David commented

2026-06-16 15:51:14 +02:00

Owner

Add company_ids to CreateKbArticleRequest / UpdateKbArticleRequest and bind it in the insert/update. A client_specific article now requires a non-empty company_ids (422 otherwise); every id is validated as a company owned by the caller's tenant (400 otherwise); any non-client_specific visibility clears the scope so a downgraded article cannot stay portal-visible. KbArticleResponse and the article SELECTs now carry company_ids so the editor can round-trip the selection.

#PMS-341

KB articles could be marked client_specific but company_ids was unsettable at every layer, so the portal read filter ($company = ANY(company_ids)) matched no one and such articles were invisible to all clients. Add company_ids to CreateKbArticleRequest / UpdateKbArticleRequest and bind it in the insert/update. A client_specific article now requires a non-empty company_ids (422 otherwise); every id is validated as a company owned by the caller's tenant (400 otherwise); any non-client_specific visibility clears the scope so a downgraded article cannot stay portal-visible. KbArticleResponse and the article SELECTs now carry company_ids so the editor can round-trip the selection. #PMS-341

David added 1 commit

2026-06-16 15:51:14 +02:00

feat(knowledge_base): wire client_specific company scoping write path

Check / fmt + clippy + compile + unit/doc tests (pull_request) Successful in 59s

Details

E2E / Playwright against staging (pull_request) Successful in 1m3s

Details

Integration / integration tests (pull_request) Successful in 5m52s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

82a6912217

KB articles could be marked client_specific but company_ids was unsettable at every layer, so the portal read filter ($company = ANY(company_ids)) matched no one and such articles were invisible to all clients.

Add company_ids to CreateKbArticleRequest / UpdateKbArticleRequest and bind it in the insert/update. A client_specific article now requires a non-empty company_ids (422 otherwise); every id is validated as a company owned by the caller's tenant (400 otherwise); any non-client_specific visibility clears the scope so a downgraded article cannot stay portal-visible. KbArticleResponse and the article SELECTs now carry company_ids so the editor can round-trip the selection.

#PMS-341