8 Commits

Author	SHA1	Message	Date
zhi	95a4702e1e	fix: remove user_id query requirement from notifications count/read-all	2026-03-11 10:49:03 +00:00
zhi	7218aabc59	fix: notifications endpoints use current user auth instead of required user_id query ... - /notifications and /notifications/count no longer require user_id param - return both count and unread fields for compatibility - /notifications/read-all marks current user notifications - /notifications/{id}/read enforces ownership (or admin)	2026-03-11 10:46:48 +00:00
zhi	a21026ac09	fix: enforce missing RBAC checks on issue/comment updates and deletes	2026-03-11 10:43:31 +00:00
Zhi	3cf2b1bc49	feat: auto activity logging on issue create/delete, fix schema db.add bug	2026-02-27 09:39:39 +00:00
Zhi	622112c02f	feat: comments RBAC + notification on new comment	2026-02-24 04:22:42 +00:00
Zhi	26ee18a4a4	feat: RBAC on issues (create/update/delete require dev+/mgr+)	2026-02-24 04:20:43 +00:00
Zhi	6d58ee779c	feat: RBAC module + project endpoints protected (admin/mgr roles)	2026-02-24 04:16:32 +00:00
Zhi	f60dc68b22	refactor: split monolithic main.py into FastAPI routers (v0.2.0) ... - app/api/deps.py: shared auth dependencies - app/api/routers/auth.py: login, me - app/api/routers/issues.py: CRUD, transition, assign, relations, tags, batch, search - app/api/routers/projects.py: CRUD, members, worklog summary - app/api/routers/users.py: CRUD, worklogs - app/api/routers/comments.py: CRUD - app/api/routers/webhooks.py: CRUD, logs, retry - app/api/routers/misc.py: API keys, activity, milestones, notifications, worklogs, export, dashboard - main.py: 1165 lines → 51 lines - Version bump to 0.2.0	2026-02-23 15:14:46 +00:00