feat: enforce tenant isolation for audit logs and enhance user list filtering for multi-tenant admins

2026-03-04 14:12:39 +09:00
parent 9da97554ce
commit 39b41a4c42
7 changed files with 78 additions and 16 deletions
--- a/backend/internal/handler/dev_handler.go
+++ b/backend/internal/handler/dev_handler.go
@@ -1253,7 +1253,7 @@ func (h *DevHandler) ListAuditLogs(c *fiber.Ctx) error {
 	const maxScan = 3000

 	for len(collected) < limit+1 && scanned < maxScan {
-		page, findErr := h.AuditRepo.FindPage(c.Context(), pageSize, nextCursor)
+		page, findErr := h.AuditRepo.FindPage(c.Context(), pageSize, nextCursor, tenantFilter)
 		if findErr != nil {
 			return errorJSON(c, fiber.StatusInternalServerError, "Failed to retrieve audit logs")
 		}