feat: prevent users from sharing projects and reviews with themselves
From the PR description
Summary
Prevents users from sharing projects or tabular reviews with themselves.
Changes
- Reject self-share emails in
POST /projects. - Reject self-share emails in
PATCH /projects/:projectId. - Reject self-share emails in
PATCH /tabular-review/:reviewId. - Block self-share emails in the shared People modal.
- Block self-share emails when creating a new project.
- Normalize/dedupe project share emails before persisting.
Why
Owners already have access, so self-sharing is redundant and can create confusing access states in shared/member lists.
Testing
npm run build --prefix backendnpm run build --prefix frontend
Our analysis
Reject self-share across project and review endpoints — read the full analysis →
Think the analysis missed something the PR description covers?
Commits in this PR (1)
| SHA | Subject | Author | Date | |
|---|---|---|---|---|
87e55d60 | feat: prevent users from sharing projects and reviews with themselves | willchen96 | 2026-05-16 | ↗ GitHub |
Capture this PR into my fork
Download a Markdown prompt that tells Claude how to port every
commit in this PR into your working tree. Run it via
claude -p < capture-pull-136.md from
inside the repo you want the changes in.