Anso 4735edfafc chore(stacks): explicit stack:read RBAC on list endpoints (#1187) ...

GET /api/stacks and GET /api/stacks/statuses previously relied on the
global authGate for protection without declaring their own permission.
Every other endpoint in this router uses requirePermission(); the two
list endpoints were silent.

Add the explicit gate so:
1. The permission model is uniformly declared (audit-readability).
2. A future role (or per-stack Admiral scoped grant) without
   stack:read is correctly rejected without an extra code change.
3. The list endpoint behavior stays in sync with checkPermission
   semantics that the rest of the stack router already obeys.

Runtime is observably unchanged for every existing role: admin,
node-admin, deployer, viewer, and auditor all hold stack:read per
ROLE_PERMISSIONS, so the new gate is a no-op for current users.
No new test added because no role currently fails the gate; the
existing stack suite (65 tests, all admin-role) exercises both
endpoints and stays green.

2026-05-24 15:40:33 -04:00

..

scripts

fix(fleet): resolve getSenchoVersion crash in Docker containers (#396)

2026-04-06 00:44:36 -04:00

src

chore(stacks): explicit stack:read RBAC on list endpoints (#1187)

2026-05-24 15:40:33 -04:00

.npmrc

chore(deps): upgrade major dependencies (ESLint 10, recharts 3, TS 6, Vite 8) (#130)

2026-03-25 00:03:08 -04:00

eslint.config.mjs

refactor(backend): collapse entitlement provider abstraction back to LicenseService (#889)

2026-05-02 23:45:44 -04:00

package-lock.json

chore(deps): bump the all-npm-backend group in /backend with 5 updates (#1173)

2026-05-23 03:07:20 -04:00

package.json

ci: harden CI and supply-chain pipeline (#1169)

2026-05-23 02:37:29 -04:00

tsconfig.json

perf(build): enable incremental tsc (#827)

2026-04-28 09:15:54 -04:00

vitest.config.ts

perf(test): build baseline DB once via vitest globalSetup (#829)

2026-04-28 10:08:39 -04:00