fix(comments): require canView access before posting a comment - #2070

Merged

richiemcilroy merged 4 commits into

mainfrom

codex/fix-comment-idor

Aug 3, 2026

Commits on Aug 3, 2026

fix(comments): require canView access before posting a comment

Olena Ponomarova
authored and
richiemcilroy
committed
address review: neutral wording, reject nonexistent videoId

Olena Ponomarova
authored and
richiemcilroy
committed
address review: log operational failures separately from not-found

Olena Ponomarova
authored and
richiemcilroy
committed
address review: cap existence check with .limit(1)

Olena Ponomarova
authored and
richiemcilroy
committed