James d5be120058 refactor: enforce RBAC only in lib layer ... - Remove API-level access checks (requireDossierAccess) - Pass user context to lib functions instead of system context - Single enforcement point: lib.EntryList/EntryGet/etc check access - Fixes EnsureCategoryEntry to use EntryWrite (correct function name) All access control now happens at the lowest level in lib. API and MCP layers just pass context through. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>		2026-02-07 17:05:05 -05:00
..
._db_schema.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
access.go	refactor: enforce RBAC only in lib layer	2026-02-07 17:05:05 -05:00
config.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
crypto.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
data.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
db_auth.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
db_queries.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
db_schema.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
email.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
errors.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
files.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
lab_reference.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
llm.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
migrate_category.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
normalize.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
parse_numeric.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00
prompt.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
roles.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
signal.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
translate.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
types.go	Initial commit from dev	2026-02-01 08:03:12 +00:00
v2.go	fix: genome query RBAC - use system context for data access	2026-02-07 16:31:17 -05:00