Scott Idem
6d13b952c4
Implement V3 API security hardening and multi-tenant data isolation
...
- Enhanced AuthContext with role-aware fields (administrator, manager, super).
- Implemented deferred database lookups for user roles in get_v3_auth_context.
- Added global account isolation in api_crud_v3.py using check_account_access and apply_forced_account_filter.
- Hardened all V3 CRUD endpoints (GET, POST, PATCH, DELETE) and nested routes with ownership verification.
- Enforced forced account filtering at the SQL level for Listing and Searching.
- Updated documentation with details on the new security and data isolation architecture.
2026-01-07 13:34:38 -05:00
Scott Idem
13620a63d0
Save notes and documentation updates
2026-01-06 19:36:58 -05:00
Scott Idem
a42f32acf4
Added more documentation. Improved CRUD V3 endpoints and better responses.
2026-01-06 13:52:05 -05:00
Scott Idem
872279de0b
One last round of testing and documentation updates.
2026-01-02 21:03:32 -05:00
Scott Idem
f5ab2118ad
Fix: Enhance V3 Search with 'contains', 'startswith', 'endswith' operators and improve error reporting.
2026-01-02 20:42:19 -05:00
Scott Idem
f865b1cfb7
Security: Implement modern JWT authentication for V3 CRUD and Search; update documentation and to-do list.
2026-01-02 20:26:44 -05:00
Scott Idem
09ec231303
Security: Implement recursion depth limits and field allowlists for Advanced Search; add reference SQL exports.
2026-01-02 19:38:37 -05:00
Scott Idem
bf16f988c5
Saving recommended updates by the Svelte Gemini agent.
2026-01-02 18:57:37 -05:00
Scott Idem
8c0be931c0
Added samples for Svelte side API code and a new CRUD V3 API guide.
2026-01-02 18:06:20 -05:00
Scott Idem
9b8052149a
Saving these SQL export examples.
2026-01-02 17:53:59 -05:00
Scott Idem
2f24a5588b
Feature: Implement advanced POST-based search with recursive logical grouping and unique parameterization (Verified Working).
2026-01-02 17:09:29 -05:00
Scott Idem
7b9ec69e7b
Refactor: Add legacy V2 support to modern object definitions and document V3 architecture.
2026-01-02 16:14:41 -05:00
Scott Idem
4a62eecf83
Work after logging related fixes.
2026-01-02 15:17:43 -05:00
Scott Idem
80bb4b296f
Restored lost file
2025-12-03 20:47:47 -05:00
Scott Idem
b1d05c7e66
A quick version update for the god like catch all CRUD endpoints. Version 3 will be even better!
2025-12-03 17:58:58 -05:00
