inou/portal
James 6486a52ad9 refactor: complete RBAC redesign with hierarchical permissions
Simplify access control from 500+ lines to ~50 lines of core logic:
- New permission bitmask (PermRead/Write/Delete/Manage)
- Hierarchical access (dossier → category → entry)
- Single choke points: CheckAccess(), EntryQuery(), DossierQuery()
- All data access now enforced through lib RBAC layer
- Removed complex role templates and permission caching

Also improved NewID() to use UUID v4 + SHA-256 hash for better
randomness distribution (was limited to 0-7 hex start).

Net -210 lines across 28 files. Ready for staging deployment.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-11 00:06:02 -05:00
..
bin Initial commit 2026-02-01 02:43:27 -05:00
lang fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
static fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
templates refactor: rename prompt to tracker everywhere 2026-02-09 02:05:17 -05:00
access_log.go Initial commit 2026-02-01 02:43:27 -05:00
api_client.go Initial commit 2026-02-01 02:43:27 -05:00
api_mobile.go refactor: complete RBAC redesign with hierarchical permissions 2026-02-11 00:06:02 -05:00
api_proxy.go feat: optimize genome queries with IN clauses, dedup, repute filter 2026-02-10 02:13:18 -05:00
defense.go feat: add Terms of Service page and legal page updates 2026-02-08 04:59:59 -05:00
dossier_sections.go refactor: complete RBAC redesign with hierarchical permissions 2026-02-11 00:06:02 -05:00
genome.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00
inou-portal Initial commit 2026-02-01 02:43:27 -05:00
main.go refactor: complete RBAC redesign with hierarchical permissions 2026-02-11 00:06:02 -05:00
main.go.bak Initial commit 2026-02-01 02:43:27 -05:00
mcp_http.go refactor: complete RBAC redesign with hierarchical permissions 2026-02-11 00:06:02 -05:00
mcp_tools.go refactor: complete RBAC redesign with hierarchical permissions 2026-02-11 00:06:02 -05:00
oauth.go Initial commit 2026-02-01 02:43:27 -05:00
portal Initial commit 2026-02-01 02:43:27 -05:00
trackers.go refactor: rename prompt to tracker everywhere 2026-02-09 02:05:17 -05:00
upload.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00