Simplify access control from 500+ lines to ~50 lines of core logic: - New permission bitmask (PermRead/Write/Delete/Manage) - Hierarchical access (dossier → category → entry) - Single choke points: CheckAccess(), EntryQuery(), DossierQuery() - All data access now enforced through lib RBAC layer - Removed complex role templates and permission caching Also improved NewID() to use UUID v4 + SHA-256 hash for better randomness distribution (was limited to 0-7 hex start). Net -210 lines across 28 files. Ready for staging deployment. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| bin | ||
| lang | ||
| static | ||
| templates | ||
| access_log.go | ||
| api_client.go | ||
| api_mobile.go | ||
| api_proxy.go | ||
| defense.go | ||
| dossier_sections.go | ||
| genome.go | ||
| inou-portal | ||
| main.go | ||
| main.go.bak | ||
| mcp_http.go | ||
| mcp_tools.go | ||
| oauth.go | ||
| portal | ||
| trackers.go | ||
| upload.go | ||