Implement per-user note directory isolation with filesystem sandboxing #10

New Issue

2026-02-25T16:05:12+01:00

libretech commented

2026-02-25 16:05:12 +01:00

Summary

Ensure each tenant's notes are stored in an isolated filesystem directory with proper sandboxing to prevent cross-tenant data access.

Design

Each user gets a dedicated directory: data/{user_id}/
All file operations scoped to the user's directory
Path traversal prevention (canonicalize and validate all paths)
Symlink following disabled within user directories

Implementation Tasks

Create user directory on first login/registration
Modify note CRUD operations to scope to user directory
Add path validation to prevent directory traversal (../, symlinks)
Add filesystem permission enforcement
Write tests for path traversal attack vectors

Security Considerations

Must prevent ../ path traversal attacks
Must prevent symlink-based escapes
Must validate all file paths against user's root directory
Race condition protection on file operations

Acceptance Criteria

Each user can only access their own notes directory
Path traversal attempts return 403/404
Symlink-based escapes are blocked
Unit tests cover all known traversal vectors

## Summary Ensure each tenant's notes are stored in an isolated filesystem directory with proper sandboxing to prevent cross-tenant data access. ## Design - Each user gets a dedicated directory: data/{user_id}/ - All file operations scoped to the user's directory - Path traversal prevention (canonicalize and validate all paths) - Symlink following disabled within user directories ## Implementation Tasks - [x] Create user directory on first login/registration - [x] Modify note CRUD operations to scope to user directory - [x] Add path validation to prevent directory traversal (../, symlinks) - [x] Add filesystem permission enforcement - [x] Write tests for path traversal attack vectors ## Security Considerations - Must prevent ../ path traversal attacks - Must prevent symlink-based escapes - Must validate all file paths against user's root directory - Race condition protection on file operations ## Acceptance Criteria - [x] Each user can only access their own notes directory - [x] Path traversal attempts return 403/404 - [x] Symlink-based escapes are blocked - [x] Unit tests cover all known traversal vectors

libretech added the phase-1 label 2026-02-25 16:05:12 +01:00

libretech changed title from ~~Per-user note directory isolation~~ to Implement per-user note directory isolation

2026-02-28 20:24:02 +01:00

libretech added the task label 2026-02-28 20:24:19 +01:00

libretech referenced this issue

2026-02-28 21:41:31 +01:00

Epic: Phase 1 — Multi-tenant Backend #7

libretech changed title from ~~Implement per-user note directory isolation~~ to Implement per-user note directory isolation with filesystem sandboxing

2026-03-01 20:31:26 +01:00

libretech added the backend security labels 2026-03-01 20:32:20 +01:00

libretech closed this issue

2026-04-28 22:29:04 +02:00

libretech referenced this issue from a commit

2026-05-02 14:50:46 +02:00

Add per-tenant filesystem isolation

Sign in to join this conversation.