From 29257048b562d7604b13581dfcda9b19e1d9548f Mon Sep 17 00:00:00 2001 From: Edwin van den Houdt Date: Thu, 30 Jul 2026 09:24:53 +0200 Subject: [PATCH] fix(format): prettier drift in 2 docs (pre-existing, caught by format:check) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit No content change — markdown list-marker/line-wrap normalization only. Co-Authored-By: Claude Sonnet 5 --- .../backlog/WP-53-inbound-identity-and-citizen-scoping.md | 4 ++-- docs/reference/openzaak-integration.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md b/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md index 488df9e..5372a61 100644 --- a/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md +++ b/docs/project/backlog/WP-53-inbound-identity-and-citizen-scoping.md @@ -115,8 +115,8 @@ session sync (CLAUDE.md out-of-scope list). ## Risks - Missing a `DemoOwner` call site → a citizen sees another's data. Mitigated: grep gate (clean) - + `ApplicationTests.Applications_are_scoped_to_the_caller_bsn` (two `X-Subject` identities, - HTTP end-to-end) proving neither sees the other's cases. + - `ApplicationTests.Applications_are_scoped_to_the_caller_bsn` (two `X-Subject` identities, + HTTP end-to-end) proving neither sees the other's cases. - ZGW rol filter param name is exact and version-sensitive; asserted in `OpenZaakZaakSourceTests.ListMyCases_filters_by_the_callers_bsn`. diff --git a/docs/reference/openzaak-integration.md b/docs/reference/openzaak-integration.md index 4424055..9b676c1 100644 --- a/docs/reference/openzaak-integration.md +++ b/docs/reference/openzaak-integration.md @@ -173,7 +173,7 @@ CallerIdentity.cs`): existing admin-only `ListCases(now)`. `LocalZaakSource` filters `ApplicationStore.List(bsn)` (unchanged local behaviour); `OpenZaakZaakSource` appends ZGW's `rol__betrokkeneIdentificatie__natuurlijkPersoon__inpBsn=` query filter to `GET - {ZrcBaseUrl}/zaken`. `GET /applications` (the citizen's own dashboard) now routes through this +{ZrcBaseUrl}/zaken`. `GET /applications` (the citizen's own dashboard) now routes through this instead of calling `ApplicationStore` directly — the last "reads a static store directly" gap the ACL caveat below used to flag for a citizen-facing endpoint.