jobtrackingapp/docs/security/ENDPOINT_AUTH_MATRIX.csv

1	method	route	source	declared_auth	control_observed	sensitive_asset_or_effect	candidate_test_suite	audit_execution
2	GET	/api/attachments/{jobId:int}	AttachmentsController.cs:87	local scheme	parent owner-filtered existence check before child listing	attachment metadata	AttachmentConsistencyTests	source reviewed; negative list and HTTP NOT RUN
3	GET	/api/attachments/download/{id:int}	AttachmentsController.cs:103	local scheme	parent Include ownership filter and managed path checks	attachment bytes	AttachmentConsistencyTests	PASSED foreign-owner controller rejection; HTTP NOT RUN
4	PATCH	/api/attachments/{id:int}	AttachmentsController.cs:125	local scheme	parent Include ownership filter via shared helper	metadata and AI-use flag	AttachmentConsistencyTests	PASSED foreign-owner controller rejection; HTTP NOT RUN
5	DELETE	/api/attachments/{id:int}	AttachmentsController.cs:170	local scheme	parent Include ownership filter via shared helper	attachment removal	AttachmentConsistencyTests	PASSED foreign-owner controller rejection with row/file retained; HTTP NOT RUN
6	GET	/api/billing/status	BillingController.cs:42	local scheme	method declares local authentication	entitlement status	BillingControllerTests	NOT RUN
7	POST	/api/billing/checkout	BillingController.cs:58	local scheme	method declares local authentication; provider mocked only	checkout session	BillingControllerTests	NOT RUN
8	POST	/api/billing/portal	BillingController.cs:104	local scheme	method declares local authentication; provider mocked only	billing portal	BillingControllerTests	NOT RUN
9	POST	/api/billing/webhook	BillingController.cs:132	AllowAnonymous	signature verification and size limit; full binding audit pending	subscription entitlement	BillingControllerTests	NOT RUN
10	PUT	/api/users/{id}/roles	UsersController.cs:142	Admin role at class	privilege transition review pending	account roles	UsersControllerTests	NOT RUN