From dc027cdf40e71871e627b8b37e5e8b1b18dc433b Mon Sep 17 00:00:00 2001
From: Marcel <marcel@familienarchiv>
Date: Mon, 20 Apr 2026 22:06:19 +0200
Subject: [PATCH] test(audit): add cross-user scoping regression for
 youParticipated

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .../AuditLogQueryRepositoryRolledUpTest.java      | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/backend/src/test/java/org/raddatz/familienarchiv/dashboard/AuditLogQueryRepositoryRolledUpTest.java b/backend/src/test/java/org/raddatz/familienarchiv/dashboard/AuditLogQueryRepositoryRolledUpTest.java
index c5ebc934..f0d732d5 100644
--- a/backend/src/test/java/org/raddatz/familienarchiv/dashboard/AuditLogQueryRepositoryRolledUpTest.java
+++ b/backend/src/test/java/org/raddatz/familienarchiv/dashboard/AuditLogQueryRepositoryRolledUpTest.java
@@ -230,6 +230,21 @@ class AuditLogQueryRepositoryRolledUpTest {
         );
     }
 
+    @Test
+    void youParticipated_is_false_when_reply_notification_belongs_to_other_user() {
+        insertUserAndDocs();
+        UUID commentId = UUID.randomUUID();
+        insertAuditEvent(OTHER_USER_ID, DOC_ID, "COMMENT_ADDED",
+                Instant.parse("2026-04-20T10:00:00Z"), Map.of("commentId", commentId.toString()));
+        insertReplyNotification(OTHER_USER_ID, DOC_ID, commentId);
+
+        List<ActivityFeedRow> rows = auditLogQueryRepository.findRolledUpActivityFeed(USER_ID.toString(), 40);
+
+        assertThat(rows).allSatisfy(r ->
+                assertThat(r.isYouParticipated()).isFalse()
+        );
+    }
+
     @Test
     void youMentioned_is_true_when_mention_created_payload_matches_current_user() {
         insertUserAndDocs();