waleed 3664a56fca fix(socket): add server-side lock validation and admin-only permissions ...

1. BATCH_TOGGLE_LOCKED now requires admin role - non-admin users with
   write role can no longer bypass UI restriction via direct socket
   messages

2. BATCH_REMOVE_BLOCKS now validates lock status server-side - filters
   out protected blocks (locked or inside locked parent) before deletion

3. Remove duplicate/outdated comment in regenerateBlockIds

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-31 20:45:40 -08:00

..

docs

add lock block image

2026-01-31 19:16:34 -08:00

sim

fix(socket): add server-side lock validation and admin-only permissions

2026-01-31 20:45:40 -08:00