 Agent Zero
|
8da803156e
|
phase1: RLS simplified to tenant isolation only + canAccess fallback removed + useUserPermissions hook + security kernel docs
|
2026-07-29 16:36:51 +02:00 |
|
|
Agent Zero
|
66fd387301
|
phase0a: 8/8 cross-tenant security tests passing — visibility defense-in-depth, RLS, entity permissions all verified
|
2026-07-29 16:19:55 +02:00 |
|
|
Agent Zero
|
0448962d08
|
fix: visibility.py Defense-in-Depth tenant_id filter + entity_permissions deleted_at migration + cross-tenant tests
|
2026-07-29 16:12:04 +02:00 |
|
|
Agent Zero
|
f1a2484055
|
fix: WeasyPrint URL fetcher + attachment improvements + webhook error propagation + WebSocket conversation check + RLS disabled on system tables (bootstrap fix)
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 13:19:21 +02:00 |
|
|
Agent Zero
|
9bd6936d17
|
ci: CI/CD pipeline with 10 quality gates + Forgejo Actions workflow
|
2026-07-29 13:05:14 +02:00 |
|
|
Agent Zero
|
648d8d89d6
|
fix: outbox consumer_inbox idempotency logic + tenant_plugin_activation per-tenant check
|
2026-07-29 13:02:33 +02:00 |
|
|
Agent Zero
|
0f4e51c4b3
|
fix: consumer_inbox table for outbox idempotency + tenant_plugin_activation table
|
2026-07-29 12:49:15 +02:00 |
|
|
Agent Zero
|
fd1a170f31
|
fix: plugin duplicate route registration + prestart.sh Python instead of psql + SMTP in docker-compose
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 12:48:25 +02:00 |
|
|
Agent Zero
|
de53bcff25
|
fix: guest_sessions Redis index for revocation + RLS on all tenant tables (migration 0064)
|
2026-07-29 12:46:50 +02:00 |
|
|
Agent Zero
|
bfd4ff8dd5
|
fix: migration 0061 — remove non-existent tables from RLS list
|
2026-07-29 12:40:15 +02:00 |
|
|
Agent Zero
|
e1d522c6a2
|
fix: missing notification entity_type/entity_id migration (0063)
|
2026-07-29 12:35:44 +02:00 |
|
|
Agent Zero
|
8dacb739bd
|
P1 fixes: outbox no_handlers, HTML sanitization, WebSocket plugin check, fail-closed plugin gate, plugin admin-only
|
2026-07-29 12:33:46 +02:00 |
|
|
Agent Zero
|
8539a6402c
|
P1.6: secure guest invitation tokens (secrets.token_urlsafe + SHA-256 hash + one-time use + session revocation)
|
2026-07-29 12:30:00 +02:00 |
|
|
Agent Zero
|
26bf8d3a31
|
P0+P1 fixes: RCE sandbox, SQL injection, RLS tenant isolation, DB roles, test syntax, attachment, permission registry, membership check
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 12:28:08 +02:00 |
|
|
Agent Zero
|
81ae5b7cb6
|
fix: redis cache invalidation in permission service + permission check in entity_permissions route + upsert cache invalidation + remove TopBar quick-create
|
2026-07-29 10:45:45 +02:00 |
|
|
Agent Zero
|
0cebd23e3b
|
fix: remove TopBar quick-create button + canAccess fallback in ContactDetail + ContactDetailPage + ContactsList + duplicate import fix
|
2026-07-29 10:33:31 +02:00 |
|
|
Agent Zero
|
9be0cd0909
|
hotfix: add useAuthStore import to Sidebar.tsx
|
2026-07-29 10:17:52 +02:00 |
|
|
Agent Zero
|
14a1073c92
|
hotfix: sidebar + topbar canAccess fallback — show all items for system_admin or empty permissions
|
2026-07-29 10:17:03 +02:00 |
|
|
Agent Zero
|
b545bf64b4
|
hotfix: all 7 TypeScript errors fixed — NoAccessPage export + ABACRuleEditor size + ShareDialog icon types
|
2026-07-29 09:16:58 +02:00 |
|
|
Agent Zero
|
c1416161c2
|
hotfix: ProtectedRoute allows access for system_admin + empty permissions + /kein-zugriff route + NoAccessPage
|
2026-07-29 09:11:42 +02:00 |
|
|
Agent Zero
|
da76b4636e
|
fix: require_permission decorator → Depends() in entity_permissions.py
|
2026-07-29 08:05:56 +02:00 |
|
|
Agent Zero
|
deb3a29721
|
final: RBAC progress update — all 23 sprints code complete
|
2026-07-29 07:58:22 +02:00 |
|
|
Agent Zero
|
4c134c62b3
|
fix: GuestContacts title prop → aria-label
|
2026-07-29 03:13:54 +02:00 |
|
|
Agent Zero
|
015eb9414e
|
fix: SettingsRechte TypeScript errors fixed — entity permission types + ConfirmDialog props
|
2026-07-29 03:13:07 +02:00 |
|
|
Agent Zero
|
680d5ab6f1
|
fix: migration 0058 checkconstraint + all sprint 20-23 deployed
|
2026-07-29 03:10:26 +02:00 |
|
|
Agent Zero
|
24690fb674
|
sprint20-23: tests + documentation + guest access + infrastructure + migrations 0059
|
2026-07-29 02:53:37 +02:00 |
|
|
Agent Zero
|
ddf73ee42e
|
sprint14-19: ABAC UI rule editor + permission templates + bulk share + analytics + delegation + resolution strategies + migrations 0056-0058
|
2026-07-29 02:47:03 +02:00 |
|
|
Agent Zero
|
e0003b9384
|
sprint12+13: zentrale rechte settings page + ABAC engine backend (model, migration 0055, service, routes)
|
2026-07-29 02:42:16 +02:00 |
|
|
Agent Zero
|
2c14368b90
|
sprint10+11: AI permission filter + API token scopes + merge check + owner transfer service + auto-transfer on deactivation
|
2026-07-29 02:37:51 +02:00 |
|
|
Agent Zero
|
b7ccd9e6c3
|
sprint8: fix migration 0054 — skip existing owner_id columns
|
2026-07-29 02:35:32 +02:00 |
|
|
Agent Zero
|
958e412152
|
sprint8: plugin entities owner_id migration 0054 + calendar owned_mixin
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 02:33:16 +02:00 |
|
|
Agent Zero
|
48b2dfdb11
|
sprint9: app visibility — sidebar permission filter + TopBar + ProtectedRoute + route guards
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 02:28:52 +02:00 |
|
|
Agent Zero
|
88c04286af
|
sprint6+7: permission notifications + audit trail + notification entity filter + mail account permissions + migration 0053
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 02:18:17 +02:00 |
|
|
Agent Zero
|
71ed592aa2
|
sprint4+5: field-level permissions complete + universal ShareDialog frontend
|
2026-07-29 02:14:26 +02:00 |
|
|
Agent Zero
|
b06aeeb720
|
sprint3: dashboard counts per user + import owner_id + export visibility filter
|
2026-07-29 02:11:29 +02:00 |
|
|
Agent Zero
|
517e1b6d8b
|
sprint2+3: remaining services visibility filter + search provider permission-aware + dashboard route
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 02:05:14 +02:00 |
|
|
Agent Zero
|
52a5c347de
|
sprint2: frontend permission checks for ContactDetail + ContactsList + Field-Level UI
|
2026-07-29 01:56:07 +02:00 |
|
|
Agent Zero
|
9fc84b7905
|
sprint2: 8 services + 8 routes visibility filter + BaseSearchProvider + owned_mixin on models
Check Cross-Plugin Imports / check (push) Has been cancelled
|
2026-07-29 01:52:47 +02:00 |
|
|
Agent Zero
|
479ee04834
|
sprint2: visibility filter + contact service access checks + contacts route integration
|
2026-07-29 01:38:18 +02:00 |
|
|
Agent Zero
|
ea1c1d5113
|
sprint1 complete: rate limiting on permission changes + sprint1 fully done
|
2026-07-29 01:31:09 +02:00 |
|
|
Agent Zero
|
48647a58e0
|
sprint1: set_user_context + RLS policies on contacts + folder ACL migration 0051+0052
|
2026-07-29 01:30:25 +02:00 |
|
|
Agent Zero
|
5afa1fa927
|
sprint1: entity_permissions table + owned_mixin + universal permission service + API + migrations 0049+0050
|
2026-07-29 01:28:13 +02:00 |
|
|
Agent Zero
|
cc021cda99
|
feat: folder permissions (ACLs) - share folders with users/groups, inherit to subfolders, permission dialog UI
|
2026-07-28 23:58:19 +02:00 |
|
|
Agent Zero
|
784a771039
|
feat: column visibility, bulk actions, custom sort drag-drop, custom fields in filter/sort/group, mobile optimization
|
2026-07-28 23:14:15 +02:00 |
|
|
Agent Zero
|
9681827395
|
fix: saved filters now persistent via API (was local state)
|
2026-07-28 21:32:29 +02:00 |
|
|
Agent Zero
|
8cf12645f7
|
fix: wider middle column, narrower detail pane, horizontal scrollbar in table view
|
2026-07-28 15:31:22 +02:00 |
|
|
Agent Zero
|
33aae769e4
|
feat: tree grouping for list and cards views (matching table view)
|
2026-07-28 15:26:46 +02:00 |
|
|
Agent Zero
|
dbf804f0e3
|
feat: table view overhaul - drag resize, drag reorder, multi-sort headers, tree grouping
|
2026-07-28 15:21:03 +02:00 |
|
|
Agent Zero
|
0a92717710
|
fix: alembic down_revision 0046 not 0046_plugin_allowlist
|
2026-07-28 14:41:04 +02:00 |
|
|
Agent Zero
|
58b163ba78
|
feat: saved_views backend API + model + migration + frontend hooks
|
2026-07-28 14:36:52 +02:00 |
|