4 commits

Author	SHA1	Message	Date
ZdenekSrotyr	2043594670	fix: restrict script execution endpoints to analyst/admin roles ... deploy, run, and run-deployed require analyst; undeploy requires admin. Update test to use admin token for undeploy.	2026-04-09 16:31:42 +02:00
ZdenekSrotyr	8e9a0c367a	fix: replace os.environ direct assignment with monkeypatch.setenv in test fixtures ... Prevents environment variable leaking between tests. All DATA_DIR, JWT_SECRET_KEY, and SCRIPT_TIMEOUT assignments in fixtures now use monkeypatch.setenv() which auto-reverts after each test. Removes manual os.environ.pop() cleanup lines.	2026-04-09 07:11:36 +02:00
ZdenekSrotyr	05a1b452e9	security: harden query (read-only DB), uploads (path sanitization), scripts (AST validation)	2026-04-08 12:09:19 +02:00
ZdenekSrotyr	e0ce91ddb9	feat: add dataset permissions, script execution, Kamal config, CI/CD ... - SyncSettingsRepository + DatasetPermissionRepository with RBAC - Script deploy/run/undeploy API with import sandboxing - User sync settings API with permission checks - 4 CLI skills (connectors, security, notifications, corporate-memory) - Kamal production + staging configs - GitHub Actions CI + deploy workflows - 91 total tests passing	2026-03-27 15:40:11 +01:00