3 people 3bec43696f feat: multi role permission intersection (#15150) ...

Implements permission intersection (AND logic) to prevent permission
escalation when agents act on behalf of users.

### Changes:
- **Permission Intersection**: Operations requiring both user AND agent
permissions
- **RoleContext Type**: Unified type supporting single `roleId` or
multiple `roleIds` for intersection
- **CRUD Services**: Updated to accept `roleContext` for granular
permission control
- **Agent Integration**: Chat agents now use user + agent role
intersection for all operations
- **ORM Layer**: Enhanced `getRepository` to support multi-role
permission checks

### Related:
- Part 2 of ["Acting on behalf of user" concept
PR](https://github.com/twentyhq/twenty/pull/15103)

[Closes #1661](https://github.com/twentyhq/core-team-issues/issues/1661)

---------

Co-authored-by: Félix Malfait <felix.malfait@gmail.com>

2025-10-19 09:30:05 +02:00

..

suites

feat: multi role permission intersection (#15150)

2025-10-19 09:30:05 +02:00

types

Activate v2 default seed (#14660)

2025-09-26 16:05:09 +02:00

utils

Integration testing v2 enum field types fail and success path (#14010)

2025-08-28 10:23:04 +00:00