feat(scheduling): enforce participant roster privacy

2026-07-20 18:44:28 +02:00
parent d0b95eee58
commit 6141f39bf8
9 changed files with 430 additions and 4 deletions
--- a/src/govoplan_scheduling/backend/router.py
+++ b/src/govoplan_scheduling/backend/router.py
@@ -138,6 +138,7 @@ def _request_response(
            request,
            invitation_tokens=invitation_tokens,
            actor_ids=_principal_actor_ids(principal),
+            actor_user_id=principal.account_id,
            can_manage=_can_manage_scheduling(principal),
        )
    )