Marc-André Bombeck f950dffad4 fix(sharing): keep life events to their owner ...

Life events rode the profile sharing domain, so a profile share, a
legacy whole-record share and a MANAGE grant all read them, and MANAGE
could write them. No share level was ever worded for them, so in this
release they are the owner's only.

The life-event routes take a bare requireAuth, which refuses under an
acting-account switch. The day section and the timeline's life lane map
to no domain, so a delegate sees the section named not_shared and never
gets the lane, its readiness row or the day index marks. The profile
consent copy no longer names life events, the sharing guard and the
mutation inventory drop the four entries, and the OpenAPI descriptions
say owner-only.

2026-10-08 22:37:57 +02:00

..

fixtures

fix(sharing): keep life events to their owner

2026-10-08 22:37:57 +02:00

integration

fix(sharing): keep life events to their owner

2026-10-08 22:37:57 +02:00