admin 1a68840805 fix(auth)!: implement proper RBAC with role-permission checking ...

BREAKING CHANGE: Authorization now requires role_permissions table

Previously checked only if permission existed, now verifies user's
role has been granted the permission. Closes critical security gap
allowing any user to access any resource.

- feat: add role_permissions table schema
- feat: add GetPermissionByResourceActionAndRole repository method
- fix: update Authorize to check user role before granting access
- fix: update cache keys to include roleID
- test: update all tests for new authorization flow

2026-01-22 14:09:37 +08:00

..

authorize.go

removed username

2026-01-16 10:50:50 +08:00

health.go

feat: implement horizontal scaling optimizations for authz service

2025-12-16 10:03:18 +08:00

http.go

init

2025-12-04 10:55:25 +08:00

rate_limiter.go

feat: implement horizontal scaling optimizations for authz service

2025-12-16 10:03:18 +08:00

rbac.go

fix(auth)!: implement proper RBAC with role-permission checking

2026-01-22 14:09:37 +08:00