Marcel 3d36c26226 fix(import): exclude message field from API response; add auth boundary tests ...

- @JsonIgnore on ImportStatus.message — stops internal directory paths and
  raw exception text leaking through the admin import-status endpoint (CWE-209)
- Add importStatus_messageField_notPresentInApiResponse test (red/green verified)
- Add importStatus_returns401/403 auth boundary tests — documents and guards
  the @RequirePermission(ADMIN) protection against configuration drift

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-14 14:37:04 +02:00

..

main

fix(import): exclude message field from API response; add auth boundary tests

2026-05-14 14:37:04 +02:00

test

fix(import): exclude message field from API response; add auth boundary tests

2026-05-14 14:37:04 +02:00