Lars/shinkan-jinkendo
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases 3 Wiki Activity

Update Catalog Prompt Slots Router and Access Layer Exemptions
All checks were successful
Deploy Development / deploy (push) Successful in 44s
Details
Test Suite / pytest-backend (push) Successful in 44s
Details
Test Suite / lint-backend (push) Successful in 0s
Details
Test Suite / build-frontend (push) Successful in 13s
Details
Test Suite / k6 /health Baseline (push) Successful in 34s
Details
Test Suite / playwright-tests (push) Successful in 1m13s
Details

Browse Source 
- Added documentation to the `catalog_prompt_slots.py` file to clarify its role as a global admin catalog requiring authentication and admin role, without tenant context.
- Updated the `check_access_layer_hints.py` script to include `catalog_prompt_slots.py` in the list of exempt routers, ensuring proper access control for admin functionalities.
This commit is contained in:
Lars 2026-06-15 15:27:03 +02:00
parent 7e5ef4561a
commit 90e8f51566
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
backend/routers/catalog_prompt_slots.py
View File

@ -1,5 +1,8 @@
""" """
API: Katalog-Prompt-Slots (Stammdaten × Slot-Typ). API: Katalog-Prompt-Slots (Stammdaten × Slot-Typ).
Globaler Admin-Katalog (wie catalogs.py) — require_auth + Admin-Rolle, kein TenantContext.
Eingetragen in backend/scripts/check_access_layer_hints.py EXEMPT_ROUTERS.
""" """
from __future__ import annotations from __future__ import annotations

1
backend/scripts/check_access_layer_hints.py
View File

@ -29,6 +29,7 @@ EXEMPT_ROUTERS: frozenset[str] = frozenset(
"admin_user_content.py", # Superadmin Moderation nutzerangelegter Inhalte; require_auth + is_superadmin — kein Vereinsmandant "admin_user_content.py", # Superadmin Moderation nutzerangelegter Inhalte; require_auth + is_superadmin — kein Vereinsmandant
"admin_rights.py", # Superadmin Rollen/Rechte (Capabilities, Kontingent-Bypass, Pläne); require_auth + is_superadmin — kein Vereinsmandant "admin_rights.py", # Superadmin Rollen/Rechte (Capabilities, Kontingent-Bypass, Pläne); require_auth + is_superadmin — kein Vereinsmandant
"catalogs.py", "catalogs.py",
"catalog_prompt_slots.py", # Admin Stammdaten KI-Prompt-Slots; require_auth + admin/superadmin — globaler Katalog, kein Vereinsmandant
"skills.py", "skills.py",
"maturity_models.py", "maturity_models.py",
"matrix_stack_bundle.py", "matrix_stack_bundle.py",