3 Commits

Author	SHA1	Message	Date
Fringg	c1da8a4dba	fix: RBAC audit log action filter and legacy admin level ... - Change audit log action filter from exact match to ILIKE substring search so admins can search by partial action names - Return level 1000 (not 999) for legacy config-based admins in /me/permissions so frontend correctly enables role management buttons	2026-02-25 04:07:09 +03:00
Fringg	4598c2785a	fix: RBAC API response format fixes and audit log user info ... - Simplify permission registry to return flat list[PermissionSection] with actions as list[str] - Add user_first_name and user_email to audit log entries via selectinload - Fix unused import and naming convention lint warnings	2026-02-25 03:40:40 +03:00
Fringg	3fee54f657	feat: add RBAC + ABAC permission system for admin cabinet ... Backend: - 4 new models: AdminRole, UserRole, AccessPolicy, AdminAuditLog - Permission engine with RBAC wildcard matching + ABAC policy evaluation - 26 permission sections (78 unique permissions) covering all admin routes - require_permission() FastAPI dependency for route-level access control - JWT tokens carry permissions, roles, role_level for frontend checks - Admin roles CRUD with level-based hierarchy (viewers → superadmin) - ABAC policies with time ranges and IP whitelist conditions - Full audit log with CSV export - Bootstrap service seeds 5 preset roles and assigns superadmins at startup - Alembic migration 0011 for all RBAC tables	2026-02-25 03:02:40 +03:00