johan
/
inou
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
inou/api
History
James 86e72b4f28 refactor: simplify RBAC to use accessorID string parameter 
Complete refactor from AccessContext struct to simple accessorID string
parameter for RBAC enforcement, as requested. All access control remains
in lib layer - API/Portal just pass accessor + dossier to lib functions.

Changes:
- Added accessorIDFromContext() helper in lib/v2.go
- Updated all checkAccess() calls to extract accessorID from context
- Updated all EntryList() calls (nil → "" for system context)
- Fixed auth.go helper functions to extract accessorID
- Updated categories API to pass accessor through to lib

All RBAC enforcement stays in lib - no API-level access checks.
Empty accessorID bypasses checks (system/internal operations).

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
 		2026-02-07 17:15:09 -05:00
..
prompts Initial commit 2026-02-01 02:43:27 -05:00
Sora-Regular.ttf Initial commit 2026-02-01 02:43:27 -05:00
Sora-SemiBold.ttf Initial commit 2026-02-01 02:43:27 -05:00
api Initial commit 2026-02-01 02:43:27 -05:00
api_access.go Initial commit 2026-02-01 02:43:27 -05:00
api_audit.go Initial commit 2026-02-01 02:43:27 -05:00
api_categories.go refactor: simplify RBAC to use accessorID string parameter 2026-02-07 17:15:09 -05:00
api_contact_sheet.go fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
api_dossier.go Initial commit 2026-02-01 02:43:27 -05:00
api_dossiers.go Initial commit 2026-02-01 02:43:27 -05:00
api_entries.go Initial commit 2026-02-01 02:43:27 -05:00
api_genome.go refactor: enforce RBAC only in lib layer 2026-02-07 17:05:05 -05:00
api_image.go fix: genome query RBAC - use system context for data access 2026-02-07 16:31:17 -05:00
api_labs.go Initial commit 2026-02-01 02:43:27 -05:00
api_llm.go Initial commit 2026-02-01 02:43:27 -05:00
api_mcp_audit.go Initial commit 2026-02-01 02:43:27 -05:00
api_prompts.go Initial commit 2026-02-01 02:43:27 -05:00
api_series.go Initial commit 2026-02-01 02:43:27 -05:00
api_slices.go Initial commit 2026-02-01 02:43:27 -05:00
api_studies.go Initial commit 2026-02-01 02:43:27 -05:00
api_v1.go refactor: simplify RBAC to use accessorID string parameter 2026-02-07 17:15:09 -05:00
api_version.go Initial commit 2026-02-01 02:43:27 -05:00
auth.go refactor: simplify RBAC to use accessorID string parameter 2026-02-07 17:15:09 -05:00
llm_types.go Initial commit 2026-02-01 02:43:27 -05:00
main.go Initial commit 2026-02-01 02:43:27 -05:00