No description
Find a file
counterweight 21698203fe
refactor(auth): unify authorization patterns with MANAGE_OWN_PROFILE permission
Issue #2: The profile route used a custom role-based check instead
of the permission-based pattern used everywhere else.

Changes:
- Add MANAGE_OWN_PROFILE permission to backend Permission enum
- Add permission to ROLE_REGULAR role definition
- Update profile routes to use require_permission(MANAGE_OWN_PROFILE)
- Remove custom require_regular_user dependency
- Update frontend Permission constant and profile page
- Update invites page to use permission instead of role check
- Update profile tests with proper permission mocking

This ensures consistent authorization patterns across all routes.
2025-12-21 23:50:06 +01:00
.cursor/rules Phase 1: Add pgqueuer infrastructure 2025-12-21 22:37:04 +01:00
.githooks fix pre-commit hook and code quality fixes 2025-12-21 22:14:48 +01:00
backend refactor(auth): unify authorization patterns with MANAGE_OWN_PROFILE permission 2025-12-21 23:50:06 +01:00
frontend refactor(auth): unify authorization patterns with MANAGE_OWN_PROFILE permission 2025-12-21 23:50:06 +01:00
scripts Add trap for cleanup in e2e.sh script 2025-12-21 23:17:17 +01:00
shared Phase 0: Add booking permissions and constants 2025-12-20 23:30:08 +01:00
.env.example tests passing 2025-12-18 23:33:32 +01:00
.envrc seed user 2025-12-18 22:42:32 +01:00
.gitignore Add Vitest coverage for frontend tests 2025-12-21 22:00:47 +01:00
.pre-commit-config.yaml code quality in place 2025-12-21 22:12:43 +01:00
docker-compose.yml tests passing 2025-12-18 22:08:31 +01:00
Makefile Phase 1: Add pgqueuer infrastructure 2025-12-21 22:37:04 +01:00