johan
/
inou
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
inou/portal
History
James 6546167d67 fix: route all MCP data queries through lib RBAC, kill API roundtrip 
list_dossiers, list_studies, list_series, list_slices, query_entries,
get_categories, query_genome — all now call lib directly with
AccessContext{AccessorID: dossierID}. No more HTTP roundtrip to the
internal API with its separate auth path.

Image and journal tools still use API (image rendering logic lives
there, and the API already enforces RBAC via lib.CheckAccess).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
 		2026-02-10 03:17:59 -05:00
..
bin Initial commit 2026-02-01 02:43:27 -05:00
lang fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
static fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
templates refactor: rename prompt to tracker everywhere 2026-02-09 02:05:17 -05:00
access_log.go Initial commit 2026-02-01 02:43:27 -05:00
api_client.go Initial commit 2026-02-01 02:43:27 -05:00
api_mobile.go refactor: rename prompt to tracker everywhere 2026-02-09 02:05:17 -05:00
api_proxy.go feat: optimize genome queries with IN clauses, dedup, repute filter 2026-02-10 02:13:18 -05:00
defense.go feat: add Terms of Service page and legal page updates 2026-02-08 04:59:59 -05:00
dossier_sections.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00
genome.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00
inou-portal Initial commit 2026-02-01 02:43:27 -05:00
main.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00
main.go.bak Initial commit 2026-02-01 02:43:27 -05:00
mcp_http.go fix: route all MCP data queries through lib RBAC, kill API roundtrip 2026-02-10 03:17:59 -05:00
mcp_tools.go fix: route all MCP data queries through lib RBAC, kill API roundtrip 2026-02-10 03:17:59 -05:00
oauth.go Initial commit 2026-02-01 02:43:27 -05:00
portal Initial commit 2026-02-01 02:43:27 -05:00
trackers.go refactor: rename prompt to tracker everywhere 2026-02-09 02:05:17 -05:00
upload.go refactor: unexport raw DB functions, enforce RBAC at data layer 2026-02-10 02:34:51 -05:00