James 45a6445c3b security: replace empty string bypass with explicit system accessor ID ... Changed from empty accessorID bypassing checks to explicit SystemAccessorID for better security and audit trail. Before: accessorID == "" → bypass all checks (security risk) After: accessorID == "system-internal" → bypass (explicit, auditable) Changes: - Added SystemAccessorID constant = "system-internal" - Updated SystemContext to use SystemAccessorID - Updated checkAccess() to check for specific ID - Updated accessorIDFromContext() to return SystemAccessorID - Updated all EntryList calls to use SystemAccessorID - Updated auth.go helpers to use SystemAccessorID Benefits: - Explicit backdoor ID visible in audit logs - No accidental bypass from empty strings - Clear intent for system operations - Can't collide with real hex dossier IDs (uses "system" prefix) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-02-07 17:20:24 -05:00
..
bin	Initial commit	2026-02-01 02:43:27 -05:00
lang	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
static	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
templates	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
access_log.go	Initial commit	2026-02-01 02:43:27 -05:00
api_client.go	Initial commit	2026-02-01 02:43:27 -05:00
api_mobile.go	Initial commit	2026-02-01 02:43:27 -05:00
api_proxy.go	Initial commit	2026-02-01 02:43:27 -05:00
defense.go	Initial commit	2026-02-01 02:43:27 -05:00
dossier_sections.go	security: replace empty string bypass with explicit system accessor ID	2026-02-07 17:20:24 -05:00
genome.go	Initial commit	2026-02-01 02:43:27 -05:00
inou-portal	Initial commit	2026-02-01 02:43:27 -05:00
main.go	security: replace empty string bypass with explicit system accessor ID	2026-02-07 17:20:24 -05:00
main.go.bak	Initial commit	2026-02-01 02:43:27 -05:00
mcp_http.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
mcp_tools.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
oauth.go	Initial commit	2026-02-01 02:43:27 -05:00
portal	Initial commit	2026-02-01 02:43:27 -05:00
prompts.go	fix: extracted events are root entries, documents are references	2026-02-02 07:22:27 +00:00
upload.go	security: replace empty string bypass with explicit system accessor ID	2026-02-07 17:20:24 -05:00