Santosh fc762ebffc fix: derive organizationId from target resource in updateSegment and quota actions ...

- updateSegmentAction: use getOrganizationIdFromSegmentId instead of
  getOrganizationIdFromEnvironmentId to prevent IDOR via caller-supplied
  environmentId
- deleteQuotaAction/updateQuotaAction: use getOrganizationIdFromQuotaId
  and getProjectIdFromQuotaId instead of deriving from caller-supplied
  surveyId/quota.surveyId

Addresses review feedback from @BhagyaAmarasinghe on remaining IDOR
vectors in #7326.

2026-03-11 09:18:44 +01:00

..

storybook

chore: update dependencies and fix build/lint/test regressions (#7403)

2026-03-03 17:03:03 +00:00

web

fix: derive organizationId from target resource in updateSegment and quota actions

2026-03-11 09:18:44 +01:00