Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 7 Packages Projects Releases 1 Wiki Activity
1,086 Commits 2 Branches 4 Tags
7eae8dbf84f25128c76c575f9c915987132555f2
Commit Graph

9 Commits

Author SHA1 Message Date
Agent Zero 60f30d021b fix(deploy): MAIL_ENCRYPTION_KEY zu docker-compose.yaml, .env.docker.example und deploy-guide.md hinzugefügt 
Phase B Security-Fix (5d1b239) entfernte den Default-Wert für MAIL_ENCRYPTION_KEY,
aber der Key wurde nie in docker-compose.yaml/.env.docker.example/deploy-guide.md
aufgenommen. Das führte zu Container-Crashs beim Deploy da der Key zwingend
erforderlich ist (mail/services.py RuntimeError).

- docker-compose.yaml: MAIL_ENCRYPTION_KEY in crm_app und crm_worker environment
- .env.docker.example: MAIL_ENCRYPTION_KEY mit Generierungs-Anleitung
- docs/deploy-guide.md: MAIL_ENCRYPTION_KEY in Zugänge-Liste aufgenommen
 2026-08-13 23:50:04 +02:00
Agent Zero 00420ad165 fix(compose): use crm_user for MIGRATION_DATABASE_URL bootstrap 
crm_migration role is created by migration 0085, so the first
alembic run on a fresh DB must use crm_user (POSTGRES_USER).

Fixes initial deployment failure on fresh databases.
 2026-08-06 23:07:39 +02:00
Agent Zero 20288da567 fix(cleanup): resolve 9 low-priority issues (P34-P42)
Check Cross-Plugin Imports / check (push) Has been cancelled
Details 
P34: Remove test_sample plugin from production code
P35: Remove CompanyContact=None dead code from contact.py
P36: Change Plugin.config from Text to JSONB (model + migration 0117 + service)
P37: Add AI comment about workspace overengineering in workspace.py
P38: Add container resource limits to docker-compose.yaml
P39: Guest TTL 1800 not found — already migrated to regular users
P40: Add AI comment about missing IP/Device binding in session.py
P41: Fix Redis healthcheck to use auth password
P42: RLS migration history comment already present in alembic/env.py
 2026-08-06 13:43:47 +02:00
Agent Zero 627360113f fix(permissions): fix 10 high-priority permission system issues 
P8: Invalidate all Redis sessions when is_system_admin changes
- Added is_system_admin to UserUpdate schema and UserResponse
- Added invalidate_all_user_sessions call in users.py route
- Added is_system_admin param to user_service.update_user

P9: Remove no-op permission resolution strategies
- Only highest_wins supported, others removed as no-ops
- Updated tenant.py CheckConstraint to only allow highest_wins
- Added KI-Kommentar in permissions.py

P10: Remove legacy check_permission from auth.py
- Removed duplicate check_permission and filter_fields_by_permission
- Fixed ai_copilot_service.py to use permissions.check_permission
- Updated ai_copilot route to pass resolved permissions dict

P11: Verified — no guest_users remnants found

P12: Migrate ContactFolderPermission to EntityPermission
- contact_folder_permission_service now delegates to entity_permission_service
- contact_folder_service uses EntityPermission queries
- Removed ContactFolderPermission from models/__init__.py
- Created migration 0114 to migrate data and drop table

P13: Added RLS migration history comment in alembic/env.py

P14: Verified — services already apply visibility_filter
- saved_filters/views filter by user_id (personal data)
- workspaces are UI context only
- notifications already filter by entity access

P15: Split entity_permission_service.py (932 lines) into 4 modules
- permission_resolver.py: get_effective_access, get_visible_ids, etc.
- permission_cache.py: Redis caching functions
- permission_audit.py: Audit logging helpers
- entity_permission_service.py: CRUD operations + re-exports

P16: Centralize PERM_RANK in permissions.py
- Single source: app.core.permissions.PERM_RANK
- Updated all services to import from permissions.py

P17: Fix MIGRATION_DATABASE_URL to use crm_migration
- docker-compose.yaml defaults changed from crm_user to crm_migration
- .env.docker.example updated
- prestart.sh comment updated
 2026-08-06 12:05:09 +02:00
Agent Zero 4b41b4f7af docs: KI-Kommentare für deploy.py und docker-compose.yaml — 100% zukunftssicher 2026-08-05 23:12:23 +02:00
Agent Zero 48e6b15bb2 fix: service names with underscores (crm_app, crm_worker) + docker_compose_domains with crm_app 2026-08-05 22:46:33 +02:00
Agent Zero b3133abbc1 fix: Magic ENV SERVICE_FQDN_CRM_APP_8000 for auto domain + SSL 2026-08-05 22:29:41 +02:00
Agent Zero 2d25dc35e0 fix: docker_compose_domains + worker depends_on crm-app healthy 2026-08-05 22:18:12 +02:00
Agent Zero c278597757 fix: deploy.py --initial als einzelner docker-compose Stack + docker-compose.yaml rename 2026-08-05 22:11:29 +02:00