wren b6d7f154ad fix: enforce fine-grained read/write permissions on all rbac admin endpoints ...

Previously only CreateRole/UpdateRole/DeleteRole checked specific
permission keys. Now every endpoint enforces its corresponding
permission:
  ListRoles/GetRoleRoutes/GetRolePermissions → rbac:roles:read
  ListUsers/ListRoleUsers/GetUserRoles       → rbac:users:read
  AssignUserRoles/RevokeUserRole             → rbac:user_roles:write
  UpdateRoleRoutes                           → rbac:role_routes:write
  SaveRolePermissions                        → rbac:role_permissions:write
  GetRoutePermissions                        → rbac:permissions:read

2026-04-30 11:23:09 +08:00

..

__init__.py

chore: initial commit — leaudit-platform project skeleton

2026-04-27 16:48:22 +08:00

auditServiceImpl.py

feat: add async worker queues and retry controls

2026-04-29 11:48:09 +08:00

authServiceImpl.py

feat: add rbac-backed settings modules

2026-04-29 22:25:06 +08:00

documentServiceImpl.py

feat: add document versioning and list API

2026-04-29 11:48:50 +08:00

entryModuleAdminServiceImpl.py

feat: add rbac-backed settings modules

2026-04-29 22:25:06 +08:00

homeServiceImpl.py

fix: restrict area bypass to super_admin only

2026-04-30 10:58:37 +08:00

ossServiceImpl.py

feat: complete M1-M3 infrastructure — OSS client, native execution chain, rule lifecycle API, system docs

2026-04-28 11:49:55 +08:00

permissionServiceImpl.py

chore: initial commit — leaudit-platform project skeleton

2026-04-27 16:48:22 +08:00

rbacAdminServiceImpl.py

fix: enforce fine-grained read/write permissions on all rbac admin endpoints

2026-04-30 11:23:09 +08:00

rbacServiceImpl.py

feat: add rbac-backed settings modules

2026-04-29 22:25:06 +08:00

ruleServiceImpl.py

refactor: region from document, not app config

2026-04-28 14:19:29 +08:00