ZdenekSrotyr ad6b3a96e4 fix: enforce role guards on admin web pages ... Add require_role(Role.ADMIN) to /admin/tables and /admin/permissions, and require_role(Role.KM_ADMIN) to /corporate-memory/admin so that non-admin users receive 403 instead of being served the page. Fix admin_cookie test fixture to supply a password_hash (required since the /auth/token endpoint blocks passwordless requests). Add analyst fixture and TestAdminRoleGuards tests verifying analysts get 403 and admins get 200 on the protected routes.		2026-04-09 16:30:13 +02:00
..
api	fix: block DuckDB metadata functions and relative paths in query endpoint	2026-04-09 16:29:11 +02:00
auth	fix: block /auth/token for OAuth-only users without password_hash	2026-04-09 16:29:47 +02:00
web	fix: enforce role guards on admin web pages	2026-04-09 16:30:13 +02:00
__init__.py	feat: add FastAPI server with auth, RBAC, and all API endpoints	2026-03-27 15:19:18 +01:00
instance_config.py	feat: complete system — web UI, all API endpoints, governance, admin, CLI commands	2026-03-27 16:52:22 +01:00
main.py	feat: add graceful shutdown handler	2026-04-09 07:03:45 +02:00
utils.py	feat: add graceful shutdown handler	2026-04-09 07:03:45 +02:00