inou/cmd
James e1b40ab872 refactor: unexport raw DB functions, enforce RBAC at data layer
Rename Query→dbQuery, Save→dbSave, Load→dbLoad, Delete→dbDelete,
Count→dbCount in lib/db_queries.go. Go compiler now prevents any code
outside lib/ from bypassing RBAC checks.

All external callers migrated to RBAC-checked functions:
- EntryCategoryCounts, EntryCount, EntryListByDossier (new)
- LabTestList, LabEntryListForIndex, LabRefLookupAll (new)
- GenomeQuery now requires AccessContext
- EntryDeleteByCategory/EntryDeleteTree now require AccessContext

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-10 02:34:51 -05:00
..
decrypt-object fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
import-lab refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00
oauth-setup Initial commit 2026-02-01 02:43:27 -05:00
populate-search-key refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00