mirror of
https://github.com/iflytek/skillhub.git
synced 2026-10-15 04:18:20 +00:00
56531d2692
Addresses the layer review on #935: - listFiles and listRuns now resolve the draft through getOwnedDraft first, enforcing the same owner-or-SUPER_ADMIN policy as every other draft endpoint. Previously an authenticated non-owner could read another draft's file metadata and validation-run summary. - new SkillAuthoringControllerAuthorizationTest: HTTP-level two-user coverage on both route prefixes (/api/v1/authoring and /api/web/authoring) — owner success, SUPER_ADMIN success, and the authenticated non-owner rejection, for both endpoints. - migration renumbered to V69__authoring_platform.sql (upstream's system_auth_settings took V68), rebased on the latest main. - web/src/api/generated/schema.d.ts regenerated from this branch's live OpenAPI surface (includes upstream API drift since the last generation plus the authoring endpoints). Signed-off-by: zjncs <18910855655@163.com> |
||
|---|---|---|
| .. | ||
| .mvn | ||
| scripts | ||
| skillhub-app | ||
| skillhub-auth | ||
| skillhub-domain | ||
| skillhub-infra | ||
| skillhub-notification | ||
| skillhub-search | ||
| skillhub-storage | ||
| .dockerignore | ||
| Dockerfile | ||
| Dockerfile.dev | ||
| mvnw | ||
| mvnw.cmd | ||
| pom.xml | ||