Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 6 Packages Projects Releases 1 Wiki Activity

phase1: RLS simplified to tenant isolation only + canAccess fallback removed + useUserPermissions hook + security kernel docs

Browse Source
This commit is contained in:
Agent Zero
2026-07-29 16:36:51 +02:00
parent 66fd387301
commit 8da803156e
9 changed files with 222 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/components/contacts/ContactDetail.tsx
-3
View File
@@ -163,9 +163,6 @@ export function ContactDetail({ contact, loading, onEdit, onDeleted }: ContactDe
const { hasPermission, hasFieldAccess } = usePermission();
const authUser = useAuthStore((state) => state.user);
const canAccess = (perm: string): boolean => {
if (authUser?.is_system_admin) return true;
const perms = authUser?.permissions || [];
if (perms.length === 0) return true;
return hasPermission(perm);
};
const createPersonMutation = useCreateContactPerson();
frontend/src/components/layout/Sidebar.tsx
+1 -4
View File
@@ -45,12 +45,9 @@ export function Sidebar() {
const { hasPermission } = usePermission();
const user = useAuthStore((state) => state.user);
// Fallback: system admin or empty permissions = show everything
// Use hasPermission directly — permissions are loaded via useUserPermissions hook
const canAccess = (perm?: string): boolean => {
if (!perm) return true;
if (user?.is_system_admin) return true;
const perms = user?.permissions || [];
if (perms.length === 0) return true; // No permissions loaded — show all, backend 403 handles it
return hasPermission(perm);
};
frontend/src/components/layout/TopBar.tsx
+1 -3
View File
@@ -22,10 +22,8 @@ export function TopBar() {
const logoutMutation = useLogout();
const minimizedWindows = useWindowStore((s) => s.windows.filter((w) => w.state === 'minimized'));
const { hasPermission } = usePermission();
// Use hasPermission directly — permissions are loaded via useUserPermissions hook
const canAccess = (perm: string): boolean => {
if (user?.is_system_admin) return true;
const perms = user?.permissions || [];
if (perms.length === 0) return true;
return hasPermission(perm);
};
const restoreWindow = useWindowStore((s) => s.restoreWindow);