tenant gate active

backend/src/workers/purge.rs

@@ -8,6 +8,7 @@ use diesel::result::Error as DieselError;
 use serde::Deserialize;
 use uuid::Uuid;
 
+use crate::auth::ensure_active_tenant;
 use crate::jobs::JOB_PURGE_DOCUMENT;
 use crate::models::{Document, DocumentVersion};
 use crate::schema::{document_asset_objects, document_assets, document_versions};
@@ -52,6 +53,12 @@ impl JobHandler for PurgeDocumentJob {
         job: crate::models::Job,
         storage: TenantStorage,
     ) -> JobExecution {
+        if let Err(err) = ensure_active_tenant(&state, job.tenant_id) {
+            return JobExecution::Failed {
+                error: err.to_string(),
+            };
+        }
+
         let payload: PurgeDocumentPayload = match serde_json::from_value(job.payload.clone()) {
             Ok(payload) => payload,
             Err(err) => {