mirror of
https://github.com/itflow-org/itflow
synced 2026-09-02 12:55:12 +00:00
The RBAC rework dropped the client_id read filter along with per-key client scope, so an all-clients key could no longer narrow to one client. apiClientScopeSql() now appends the filter after the scope fragment, so it can only narrow, never widen. Reads only - writes take client_id as their target client.