3 Commits

Author	SHA1	Message	Date
hiderfong	8b2bc84399	feat: implement full RBAC role-based access control ... Backend: - deps.py: add require_admin, require_manager, require_labeler, require_guest_or_above - user.py: all write endpoints require admin - datasource.py: write/sync endpoints require admin - metadata.py: sync endpoint requires admin - classification.py: category/rule write requires admin; results query requires guest+ with data isolation - project.py: GET requires manager with created_by filtering; DELETE checks ownership - task.py: my-tasks requires labeler with assignee_id filtering; create-task requires manager - dashboard.py: requires guest_or_above - report.py: requires guest_or_above - project_service: list_projects adds created_by filter; list_results adds project_ids filter Frontend: - stores/user.ts: add hasRole, hasAnyRole, isAdmin, isManager, isLabeler, isSuperadmin - router/index.ts: add roles to route meta; beforeEach checks role permissions - Layout.vue: filter menu routes by user roles - System.vue: hide add/edit/delete buttons for non-admins - DataSource.vue: hide add/edit/delete/sync buttons for non-admins - Project.vue: hide add/delete buttons for non-admins	2026-04-23 12:09:32 +08:00
hiderfong	dd49c9679d	fix: login redirect and res.data access in auth/test/sync APIs ... - Fix auth.ts: login/getMe now unwrap res.data before returning - Fix DataSource.vue: testConnection/syncMetadata use res.data.success/message - Fix Project.vue: autoClassify uses res.data.message - Root cause: request.ts interceptor returns full response body, auth.ts was treating response as if it was already unwrapped	2026-04-23 11:19:00 +08:00
hiderfong	1773bda06b	feat: initial commit - Phase 1 & 2 core features	2026-04-22 17:07:33 +08:00