weichenandCursor 033462a4e6 fix(authz): separate capability readiness from configured flags ...

管理台不再把开关值当成能力已接入。lineage 读取必须落在 URL 项目内，并按两端文档可见性裁剪，跨项目或不可见文档只返回空列表。

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-09-20 03:45:16 +00:00

..

features.go

fix(authz): separate capability readiness from configured flags

2026-09-20 03:45:16 +00:00

policy_test.go

test(sysadmin): cover author-only CAS, audit rollback, and HTTP gates

2026-09-17 09:15:15 +00:00

policy.go

feat(sysadmin): CAS author-only policy with transactional audit

2026-09-17 09:15:15 +00:00

service_test.go

fix(authz): separate capability readiness from configured flags

2026-09-20 03:45:16 +00:00

service.go

feat(sysadmin): add system admin aggregation API and system_settings store

2026-09-17 06:56:46 +00:00

settings_test.go

test(sysadmin): cover author-only CAS, audit rollback, and HTTP gates

2026-09-17 09:15:15 +00:00

settings.go

docs(sysadmin): annotate unwired system_settings keys as phase-2 backlog (X-4)

2026-09-18 04:02:18 +00:00

store_pg_test.go

test(sysadmin): cover author-only CAS, audit rollback, and HTTP gates

2026-09-17 09:15:15 +00:00

store.go

feat(sysadmin): CAS author-only policy with transactional audit

2026-09-17 09:15:15 +00:00