Scott Idem
6d13b952c4
Implement V3 API security hardening and multi-tenant data isolation
...
- Enhanced AuthContext with role-aware fields (administrator, manager, super).
- Implemented deferred database lookups for user roles in get_v3_auth_context.
- Added global account isolation in api_crud_v3.py using check_account_access and apply_forced_account_filter.
- Hardened all V3 CRUD endpoints (GET, POST, PATCH, DELETE) and nested routes with ownership verification.
- Enforced forced account filtering at the SQL level for Listing and Searching.
- Updated documentation with details on the new security and data isolation architecture.
2026-01-07 13:34:38 -05:00
..
2020-09-14 12:41:02 -04:00
2024-04-26 14:17:46 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-07-31 18:10:59 -04:00
2024-04-26 15:15:37 -04:00
2026-01-07 13:10:16 -05:00
2025-07-14 15:29:06 -04:00
2026-01-07 13:34:38 -05:00
2025-12-03 20:43:47 -05:00
2026-01-06 16:29:09 -05:00
2025-12-03 15:48:57 -05:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-10-02 11:42:14 -04:00
2024-05-15 10:39:01 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 14:51:11 -04:00
2024-11-07 19:37:06 -05:00
2025-06-24 18:48:38 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2025-03-18 17:34:44 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-05-22 15:54:47 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 15:15:37 -04:00
2024-04-26 14:51:11 -04:00
2025-04-08 15:34:58 -04:00
2024-10-01 15:04:12 -04:00
2024-10-09 10:38:24 -04:00
2023-04-07 17:09:51 -04:00