Schema v3: add is_public column to table_registry (default true). src/rbac.py: can_access_table() checks admin bypass, public flag, explicit permissions, wildcard bucket permissions. API enforcement: - manifest: filters tables by user access - download: 403 if no access - catalog: filters table list - query: validates referenced tables against allowed list New admin permissions API (/api/admin/permissions) for grant/revoke. 28 access control tests + 733 total tests passing. |
||
|---|---|---|
| .. | ||
| future | ||
| metrics/revenue | ||
| setup | ||
| superpowers | ||
| testing | ||
| architecture.md | ||
| auto-install.md | ||
| CONFIGURATION.md | ||
| corporate-memory-governance.md | ||
| DATA_SOURCES.md | ||
| DEPLOYMENT.md | ||
| llm-routing.md | ||
| PLAN.md | ||
| QUICKSTART.md | ||
| REFACTORING_PLAN.md | ||
| sample-data.md | ||
| theme-reference.html | ||