Morph MORPH
SIGN IN SIGN UP
dhruvhead / hub UNCLAIMED
0 0 0 TypeScript

COMMITS

develop
August 17, 2026
Q
fix(client): show correct error status instead of hardcoded 404
qorbanisepehr committed
36f260e
Q
fix(api): translate 403 AccessDeniedHttpException message
qorbanisepehr committed
ab6536e
S
fix(auth): audit security fixes and add gap-covering tests
Sepehr Qorbani committed
abbd46e
August 16, 2026
S
test(auth): HTTP-level employee collection scoping and out-of-scope 403s
Sepehr Qorbani committed
de5108e
S
fix(auth): scope employee document lists and org-chart export by role rules
Sepehr Qorbani committed
db40e6f
S
feat(rbac): conditional access rule builder with rule preview
Sepehr Qorbani committed
e003cd9
S
feat(api): enforce resource-level authorization on role, user, document-category, and form-options endpoints
Sepehr Qorbani committed
9592d6c
S
feat(api): enforce resource-level authorization on cv endpoints
Sepehr Qorbani committed
0fec7cc
S
feat(api): enforce resource-level authorization on global document endpoints
Sepehr Qorbani committed
3f75929
S
feat(api): enforce resource-level authorization on employee document endpoints
Sepehr Qorbani committed
e6c1bbd
S
feat(api): enforce resource-level authorization on employee endpoints
Sepehr Qorbani committed
799c34e
S
feat(api): protect questionnaire management with permission middleware
Sepehr Qorbani committed
a135bfc
S
feat(api): deny-based field authorization on employee resource
Sepehr Qorbani committed
b0bf37d
August 15, 2026
S
perf(api): reduce engine queries on the permission-deny path
Sepehr Qorbani committed
868ea09
S
feat(client): effective-permissions viewer on user detail page
Sepehr Qorbani committed
8a65583
S
feat(api): effective-permissions endpoint for a target user
Sepehr Qorbani committed
b1e3822
S
feat(client): redirect to login on session expiry and clear query cache
Sepehr Qorbani committed
ac07626
S
refactor(client): route guards resolve effective permissions and drop raw-array helper
Sepehr Qorbani committed
19a89a4
S
feat(client): sync PERMISSIONS const with config/permissions.php
Sepehr Qorbani committed
de1762d
S
feat(client): effective-permission authorization context with useCan/Can/Cannot
Sepehr Qorbani committed
02aa36a
S
test(api): cover effective-permission and authorization check endpoints
Sepehr Qorbani committed
713975c
S
feat(client): show linked employee display names and modal-based permission editing
Sepehr Qorbani committed
f80aa21
S
feat(api): add effective-permission and check APIs with employee linkage payloads
Sepehr Qorbani committed
7d3cfcf
S
feat(api): add authorization:grant-all command with optional role assignment
Sepehr Qorbani committed
2eab25a
August 14, 2026
S
feat(client): capability-driven cv bank actions and fix form/type errors
SepehrQorbani committed
77daca8
S
feat(api): complete authorization gaps - document history authz, versioned permission cache, explain endpoint, cv capabilities
SepehrQorbani committed
8b68109
S
feat(client): capability-driven employee actions and per-action document gating
SepehrQorbani committed
ec4e947
S
feat(api): policy-driven authorization engine with site, document, and capability policies
SepehrQorbani committed
dec3935
S
chore(client): migrate permission constants and guards to new vocabulary
SepehrQorbani committed
aff4151
S
refactor(api): migrate own/all permissions and rewire enforcement
SepehrQorbani committed
3e8c38d