fix(event): close attendee-management IDOR on delete/update routes#587

Merged

tompscanlan merged 3 commits into

mainfrom

fix/attendee-idor

May 28, 2026

Commits on May 28, 2026

fix(event): close attendee-management IDOR on delete/update routes
tompscanlan
committed
test(event): add group-admin positive control to attendee authz e2e
tompscanlan
committed
fix(test): simplify CRMC e2e - use membership.id directly
tompscanlan
committed