Ludovic Vielle 6cac6a8775 Split employee devices from DeviceConnection ...

viewer.enrolledDevices shared DeviceConnection with the admin
org list, so totalCount had to authorize with both
employee-device:list and device:list. Mirror
EmployeeDocumentConnection: a dedicated EmployeeDeviceConnection
without totalCount, and keep DeviceConnection.totalCount for
the org fleet only. Cover assumed-session device:get IDOR in e2e.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

2026-07-24 15:08:38 +02:00

..

actions.go

Add pre-assume enrolled device status query

2026-07-24 15:08:34 +02:00

gc.go

Add device data model and ITAM service

2026-07-24 15:08:21 +02:00

policies.go

Split employee devices from DeviceConnection

2026-07-24 15:08:38 +02:00

service.go

Add device data model and ITAM service

2026-07-24 15:08:21 +02:00