fix(security): enforce workspace membership authorization

#17
by basyx - opened