Files
leocrm/app/plugins/builtins/permissions/contracts.py
T
Agent Zero 727d86614e Security fixes: P0-P2 complete (22 fixes)
P0 (7): Auth-bypass removed, migrations fixed, plugin-upload disabled, RLS FORCE+WITH CHECK, plugin double-registration fixed, persistent volume, domain removed
P1 (11): User/tenant model, Redis centralized, worker separated, transactional outbox, XSS fixed, DMS chunked streaming, permissions unified, password reset, metrics secured, config/docs fixed, cross-tenant FK
P2 (4): Contact model normalized, cross-imports reduced 94%, commands+state machines for contacts/dms/mail/calendar, SPA path-traversal

8 new migrations, 99 unit tests, 13 commands, 8 contracts, 72 files changed
2026-07-25 21:03:46 +02:00

22 lines
539 B
Python

"""Permissions plugin contract — public interface for cross-plugin access."""
from __future__ import annotations
from app.plugins.builtins.permissions.models import Permission
class PermissionsContract:
"""Public contract for the permissions plugin."""
Permission = Permission
_contract_instance: PermissionsContract | None = None
def get_contract() -> PermissionsContract:
global _contract_instance
if _contract_instance is None:
_contract_instance = PermissionsContract()
return _contract_instance