Files
OSIT-AE-API-FastAPI/app/routers
Scott Idem 6d13b952c4 Implement V3 API security hardening and multi-tenant data isolation
- Enhanced AuthContext with role-aware fields (administrator, manager, super).
- Implemented deferred database lookups for user roles in get_v3_auth_context.
- Added global account isolation in api_crud_v3.py using check_account_access and apply_forced_account_filter.
- Hardened all V3 CRUD endpoints (GET, POST, PATCH, DELETE) and nested routes with ownership verification.
- Enforced forced account filtering at the SQL level for Listing and Searching.
- Updated documentation with details on the new security and data isolation architecture.
2026-01-07 13:34:38 -05:00
..
2020-09-14 12:41:02 -04:00
2024-07-31 18:10:59 -04:00
2024-10-02 11:42:14 -04:00
2024-05-15 10:39:01 -04:00
2024-11-07 19:37:06 -05:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-10-09 10:38:24 -04:00