070153a71d
Some checks failed
CI / Unit & Component Tests (push) Has been cancelled
CI / Backend Unit Tests (push) Has been cancelled
CI / E2E Tests (push) Has been cancelled
CI / Unit & Component Tests (pull_request) Has been cancelled
CI / Backend Unit Tests (pull_request) Has been cancelled
CI / E2E Tests (pull_request) Has been cancelled
All five comment write endpoints (post doc comment, reply to doc comment, post annotation comment, reply to annotation comment, edit comment) only listed ANNOTATE_ALL in @RequirePermission. Users with WRITE_ALL received 403 on every comment action. Same pattern as the annotation fix. Tests: CommentControllerTest (+5 RED→GREEN for WRITE_ALL on each method). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>