Files
zkxw/backend/app/api
zlwu 0bddf38e52 feat(project): enforce team-scoped selection with explicit all-project permission
Separate cross-team selection from attribution maintenance and apply the same scope to options, history filters and writes. Add an opt-in tenant permission without granting existing roles.

Protect authorization mutation paths against self-grants, validate tenant targets and links, and include menu ancestors atomically. Cover role union, revocation, mobile writes and administration boundaries with regression tests.
2026-11-02 17:09:20 +08:00
..
2026-06-13 19:47:22 +08:00
2026-06-18 11:05:53 +08:00
2026-08-18 14:40:15 +08:00
2026-05-20 18:06:21 +08:00
2026-06-14 17:20:52 +08:00
2026-09-28 10:49:53 +08:00
2026-06-15 19:20:49 +08:00
2026-10-13 15:18:01 +08:00
2026-05-28 13:05:46 +08:00
2026-05-25 15:14:06 +08:00
2026-05-25 15:14:06 +08:00
2026-05-28 13:05:46 +08:00
2026-10-17 11:46:53 +08:00
2026-06-02 09:39:50 +08:00
2026-06-30 09:19:06 +08:00
2026-06-02 09:39:50 +08:00
2026-06-02 09:39:50 +08:00
2026-09-28 10:49:53 +08:00