cproudlock 9eed3745fc Add parametrized authz sweep guard over all mutating routes ...

Every non-exempt POST/PUT/PATCH/DELETE must 403 a role-less member
and pass authz for admin; exemptions (auth, collector, setup wizard,
kiosk click-through, admin-or-self user update) are documented in
the test. Any future unguarded mutation fails CI as its own case.
Sweep confirmed existing gating complete: zero routes needed fixes;
lockout already implemented.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-11 19:35:57 -04:00

..

__init__.py

Add ADR-006 generic plugin collector contract

2026-06-26 16:14:27 -04:00

test_auth_ratelimit.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

test_authz.py

Add parametrized authz sweep guard over all mutating routes

2026-07-11 19:35:57 -04:00

test_collector_contract.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

test_dashboard_widgets.py

Decouple core from plugins; wire widgets hook; drop dead search hook

2026-06-26 20:00:10 -04:00

test_dashboarddefaults.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

test_employees.py

Extract employee directory into a plugin

2026-06-26 21:13:15 -04:00

test_identifiers.py

Apply skill-driven review fixes: security, hook isolation, tests, docs

2026-06-26 19:25:52 -04:00

test_knowledgebase.py

Extract Knowledge Base into a plugin (reference non-asset plugin)

2026-06-26 20:32:37 -04:00

test_plugins_enabled.py

Plugin framework maturation, reports overhaul, theming, and USB frontend repair

2026-07-11 10:01:47 -04:00

test_reports_hook.py

Rename the equipment domain to machines; retype the models catalog (ADR-011)

2026-07-11 15:17:42 -04:00

test_search_disabled.py

Second-pass review fixes: kill last hardcoded creds, wire get_services, dedup

2026-06-26 20:18:01 -04:00

test_search_integrations.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

test_search_settings.py

Add per-domain global-search toggles

2026-06-26 20:39:34 -04:00

test_setting_model.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

test_settings_branding.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00

test_slides.py

Multi-site distribution readiness: settings-driven site config, security closeout, release engineering, v0.5.0

2026-07-10 15:02:07 -04:00