James 7192f39bc1 fix: remove backward compat, migrate old access to proper RBAC grants ... Removed the backward compatibility fallback that checked the old dossier_access table from CanManageDossier/CanAccessDossier - it was a security risk (hidden path that bypassed the new RBAC system). Instead, added MigrateOldAccess() that converts existing dossier_access entries to proper access grants on startup (idempotent - skips existing). Migration rules: - Self-references (accessor == target) skipped (owner access is automatic) - can_edit = 1 → "rwdm" root grant - can_edit = 0 → "r" root grant - Role set to "Migrated" for tracking Result: 12 grants migrated from old table. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-02-07 23:27:23 -05:00
..
bin	Initial commit	2026-02-01 02:43:27 -05:00
lang	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
static	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
templates	feat: link RBAC editor from dossier privacy section	2026-02-07 17:39:08 -05:00
access_log.go	Initial commit	2026-02-01 02:43:27 -05:00
api_client.go	Initial commit	2026-02-01 02:43:27 -05:00
api_mobile.go	Initial commit	2026-02-01 02:43:27 -05:00
api_proxy.go	Initial commit	2026-02-01 02:43:27 -05:00
defense.go	Initial commit	2026-02-01 02:43:27 -05:00
dossier_sections.go	security: replace empty string bypass with explicit system accessor ID	2026-02-07 17:20:24 -05:00
genome.go	Initial commit	2026-02-01 02:43:27 -05:00
inou-portal	Initial commit	2026-02-01 02:43:27 -05:00
main.go	fix: remove backward compat, migrate old access to proper RBAC grants	2026-02-07 23:27:23 -05:00
main.go.bak	Initial commit	2026-02-01 02:43:27 -05:00
mcp_http.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
mcp_tools.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
oauth.go	Initial commit	2026-02-01 02:43:27 -05:00
portal	Initial commit	2026-02-01 02:43:27 -05:00
prompts.go	fix: extracted events are root entries, documents are references	2026-02-02 07:22:27 +00:00
upload.go	security: replace empty string bypass with explicit system accessor ID	2026-02-07 17:20:24 -05:00