luo/one-pipe-system
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: 优化审计
All checks were successful
构建并部署前端到测试环境 / build-and-deploy (push) Successful in 3m42s
Details

Browse Source
This commit is contained in:
luo
2026-08-11 16:47:58 +08:00
parent 9599a4d52b
commit 33485b137f
49 changed files with 1263 additions and 212 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
openspec/changes/enforce-audit-subject-api-boundaries/tasks.md Normal file
View File

@@ -0,0 +1,16 @@
## 1. Shared Access Rules
- [x] 1.1 Add shared current-user access checks for platform audit and subject activity APIs.
- [x] 1.2 Guard the shared investigation loader so it does not request a platform audit API for agent or enterprise users.
## 2. Entry Points and Pages
- [x] 2.1 Update business audit entry points to pass current user type and use only supported subject activity targets for agents and enterprises.
- [x] 2.2 Hide or block platform audit routes and actions for agent and enterprise users.
- [x] 2.3 Keep finance, risk, Integration and link-timeline entries platform-only.
## 3. Read-only Verification
- [x] 3.1 Verify all audit and subject-activity methods used by the UI are GET-only.
- [x] 3.2 Verify platform, agent and enterprise users cannot trigger the wrong API family.
- [x] 3.3 Run lint and type checks for changed files.