Ludovic Vielle 6cac6a8775 Split employee devices from DeviceConnection ...

viewer.enrolledDevices shared DeviceConnection with the admin
org list, so totalCount had to authorize with both
employee-device:list and device:list. Mirror
EmployeeDocumentConnection: a dedicated EmployeeDeviceConnection
without totalCount, and keep DeviceConnection.totalCount for
the org fleet only. Cover assumed-session device:get IDOR in e2e.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

2026-07-24 15:08:38 +02:00

..

access_review_campaign.graphql

Remove access review framework controls

2026-06-30 14:11:09 +02:00

agent_run.graphql

Drop agent-run lease and add approval resume

2026-06-08 15:27:56 +02:00

asset.graphql

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

audit_log.graphql

Consolidate hub type definitions into their own files

2026-04-15 09:19:39 +04:00

audit.graphql

Rename GraphQL APIs to compliance portal

2026-07-21 15:44:24 +02:00

base.graphql

Verify Crisp website ownership before connecting

2026-07-11 16:50:32 +02:00

common_third_party.graphql

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

compliance_portal.graphql

Replace portal title with entity name

2026-07-22 13:08:02 +02:00

connector.graphql

Link connector docs in the Add Source dialog

2026-07-24 14:50:18 +02:00

control.graphql

Allow publishing generated documents as minor versions

2026-05-06 14:02:59 +02:00

cookie_banner.graphql

Add regenerateCookieBannerTrackerPolicy mutation

2026-06-09 17:00:05 +02:00

cookie_consent_record.graphql

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

data_protection_impact_assessment.graphql

Allow publishing generated documents as minor versions

2026-05-06 14:02:59 +02:00

device.graphql

Split employee devices from DeviceConnection

2026-07-24 15:08:38 +02:00

document.graphql

Rename GraphQL APIs to compliance portal

2026-07-21 15:44:24 +02:00

electronic_signature.graphql

Switch console file fields to File download URLs

2026-06-11 10:47:28 +02:00

evidence.graphql

Consolidate hub type definitions into their own files

2026-04-15 09:19:39 +04:00

file.graphql

Switch console file fields to File download URLs

2026-06-11 10:47:28 +02:00

framework.graphql

Switch console file fields to File download URLs

2026-06-11 10:47:28 +02:00

mailing_list.graphql

Split GraphQL schemas into per-entity files

2026-04-15 09:19:38 +04:00

measure.graphql

Link measures to third parties

2026-05-26 15:49:17 +02:00

obligation.graphql

Allow publishing generated documents as minor versions

2026-05-06 14:02:59 +02:00

organization.graphql

Add device enrollment API and agent protocol

2026-07-24 15:08:23 +02:00

processing_activity.graphql

Rename vendors to third parties

2026-05-13 21:21:39 +02:00

resource_alias.graphql

Replace trust center alias with resource alias in console API

2026-06-22 11:40:10 +02:00

rights_request.graphql

Add data request pages to compliance portal

2026-07-20 14:31:42 +02:00

risk_assessment.graphql

Make license declarations consistently MIT

2026-07-13 16:21:14 +02:00

risk.graphql

Add risk assessment system

2026-05-19 21:44:27 +02:00

task.graphql

Consolidate hub type definitions into their own files

2026-04-15 09:19:39 +04:00

third_party.graphql

Rename GraphQL APIs to compliance portal

2026-07-21 15:44:24 +02:00

viewer.graphql

Split employee devices from DeviceConnection

2026-07-24 15:08:38 +02:00

webhook.graphql

Add rights requests to webhooks

2026-07-21 13:24:23 +02:00