Harden invoice download authorization
Suggested by Mira Koski · @mira-dev · Security
Add row-level checks before generating signed PDF download links so one customer cannot access another customer invoice.
high severity · medium effort
Owner decision
Awaiting an owner decision.