rcourtman 2ebe65bbc5 security: add scope checks to AI Patrol and agent profile endpoints ...

- AI Patrol mutation endpoints (acknowledge, dismiss, suppress, snooze, resolve,
  findings/note, suppressions/*) now require ai:execute scope to prevent
  low-privilege tokens from blinding patrol by hiding/suppressing findings

- Agent profile admin endpoints (/api/admin/profiles/*) now require
  settings:write scope to prevent low-privilege tokens from modifying
  fleet-wide agent behavior

2026-02-03 19:29:56 +00:00

..

auth_test.go

feat: remove Enterprise badges, simplify Pro upgrade prompts

2026-01-09 16:51:08 +00:00

authorizer.go

feat(rbac): add OIDC group mapping tests and audit logging for RBAC actions

2026-01-09 19:25:33 +00:00

coverage_test.go

feat: remove Enterprise badges, simplify Pro upgrade prompts

2026-01-09 16:51:08 +00:00

password.go

feat: remove Enterprise badges, simplify Pro upgrade prompts

2026-01-09 16:51:08 +00:00

permissions.go

security: add scope checks to AI Patrol and agent profile endpoints

2026-02-03 19:29:56 +00:00

policy_evaluator_test.go

feat(auth): add policy evaluator and SQLite auth manager for RBAC

2026-01-12 15:20:49 +00:00

policy_evaluator.go

feat(auth): add policy evaluator and SQLite auth manager for RBAC

2026-01-12 15:20:49 +00:00

rbac_manager_test.go

fix: replace hallucinated upgrade URLs with correct pulserelay.pro

2026-01-10 22:45:40 +00:00

rbac_manager.go

fix: replace hallucinated upgrade URLs with correct pulserelay.pro

2026-01-10 22:45:40 +00:00

rbac.go

fix(agent): add FreeBSD platform support to agent download and UI (#1051)

2026-01-11 23:51:12 +00:00

sqlite_manager_test.go

feat(auth): add policy evaluator and SQLite auth manager for RBAC

2026-01-12 15:20:49 +00:00

sqlite_manager.go

fix: harden SQLite against I/O contention causing persistent lock errors

2026-02-02 17:29:14 +00:00

token.go

feat: remove Enterprise badges, simplify Pro upgrade prompts

2026-01-09 16:51:08 +00:00