mirror of
https://github.com/iflytek/skillhub.git
synced 2026-10-15 04:18:20 +00:00
56531d2692
Addresses the layer review on #935: - listFiles and listRuns now resolve the draft through getOwnedDraft first, enforcing the same owner-or-SUPER_ADMIN policy as every other draft endpoint. Previously an authenticated non-owner could read another draft's file metadata and validation-run summary. - new SkillAuthoringControllerAuthorizationTest: HTTP-level two-user coverage on both route prefixes (/api/v1/authoring and /api/web/authoring) — owner success, SUPER_ADMIN success, and the authenticated non-owner rejection, for both endpoints. - migration renumbered to V69__authoring_platform.sql (upstream's system_auth_settings took V68), rebased on the latest main. - web/src/api/generated/schema.d.ts regenerated from this branch's live OpenAPI surface (includes upstream API drift since the last generation plus the authoring endpoints). Signed-off-by: zjncs <18910855655@163.com> |
||
|---|---|---|
| .. | ||
| docker-entrypoint.d | ||
| e2e | ||
| public | ||
| src | ||
| .browserslistrc | ||
| .dockerignore | ||
| .eslintrc.cjs | ||
| base-path-config.test.ts | ||
| base-path-config.ts | ||
| components.json | ||
| Dockerfile | ||
| index.html | ||
| LANDING_PAGE_REDESIGN.md | ||
| nginx.conf.template | ||
| package.json | ||
| playwright.config.ts | ||
| playwright.smoke.config.ts | ||
| pnpm-lock.yaml | ||
| postcss.config.js | ||
| PREVIEW.md | ||
| runtime-config.js.template | ||
| tailwind.config.ts | ||
| TODO.md | ||
| tsconfig.json | ||
| vite.config.ts | ||