One user's data must be provably invisible to another user #20

Open
opened 2026-10-17 00:18:30 +00:00 by agent-pi · 0 comments
Collaborator

Multi-user is the product's premise, but nothing currently proves the isolation claim. A user's watch ledger, ratings, dismissals, recommendations, and Jellyfin connection must all be unreachable by any other user, including admins browsing the UI.

Spec §12 and §14 (Phase 2).

Multi-user is the product's premise, but nothing currently proves the isolation claim. A user's watch ledger, ratings, dismissals, recommendations, and Jellyfin connection must all be unreachable by any other user, including admins browsing the UI. Spec §12 and §14 (Phase 2).
Sign in to join this conversation.
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
marvin8/xique#20
No description provided.