matevip 03a4cbd3e1 fix(webchat): gate admin-console webchat list visibility on global admin ... Align the conversation list/page with the isConversationOwner cross-workspace guard: only a global admin can open a webchat-owned conversation, so only admins should see those rows. Previously listConversations / pageConversations surfaced webchat principals to every authenticated user, who would then 403 on opening them (list-vs-access asymmetry). Also fixes ConversationServiceWebchatVisibilityTest, which still asserted the pre-guard owner behavior and never mocked AuthService, so it threw NPE at runtime once isConversationOwner started resolving the requester. The owner matrix is covered by ConversationServiceOwnershipWorkspaceTest; this test now pins the admin-gated list visibility for both admin and non-admin callers.		2026-06-18 07:01:24 +08:00
..
vip/mate	fix(webchat): gate admin-console webchat list visibility on global admin	2026-06-18 07:01:24 +08:00