Debian
386972366b
feat(rbac): Viewer-Rolle durchsetzen — alle Mutations nur für Admins
- middleware.go: RequireAdminForMutations() blockiert POST/PUT/DELETE
für Nicht-Admins (GET/HEAD passieren immer durch)
- main.go: Middleware in den authed-Gruppe eingehängt — wirkt für
alle ~30 Resource-Handler gleichzeitig
- api/client.ts: 403 → AntD-Notification "Nur Lesezugriff" statt
stiller Fehler
- Header: "Nur lesen"-Badge + Tooltip wenn role=viewer
- i18n de+en: viewerBadge + viewerHint
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-23 16:57:17 +02:00
..
2026-05-09 09:56:10 +02:00
2026-05-08 18:45:41 +02:00
2026-05-09 11:24:42 +02:00
2026-05-09 11:24:42 +02:00
2026-05-13 15:57:05 +02:00
2026-05-19 16:18:41 +02:00
2026-05-23 10:22:27 +02:00
2026-05-11 20:55:47 +02:00
2026-05-10 18:23:18 +02:00
2026-05-13 18:49:02 +02:00
2026-05-12 23:22:55 +02:00
2026-05-19 16:18:41 +02:00
2026-05-13 15:30:07 +02:00
2026-05-11 06:24:51 +02:00
2026-05-19 16:18:41 +02:00
2026-05-21 08:42:31 +02:00
2026-05-21 08:42:31 +02:00
2026-05-12 21:05:39 +02:00
2026-05-21 08:42:31 +02:00
2026-05-11 00:27:05 +02:00
2026-05-20 23:03:54 +02:00
2026-05-09 16:08:44 +02:00
2026-05-11 13:41:16 +02:00
2026-05-12 21:29:38 +02:00
2026-05-23 16:57:17 +02:00
2026-05-10 18:05:27 +02:00
2026-05-19 16:18:41 +02:00
2026-05-12 23:50:26 +02:00
2026-05-10 18:23:18 +02:00
2026-05-19 16:18:41 +02:00
2026-05-23 16:48:26 +02:00
2026-05-09 21:49:14 +02:00
2026-05-23 10:22:27 +02:00
2026-05-21 13:09:51 +02:00