[PR #136] [MERGED] Feat/rbac #1989

New Issue

2026-05-24T12:46:32-05:00

GiteaMirror commented

2026-05-24 12:46:32 -05:00

📋 Pull Request Information

Original PR: https://github.com/reconurge/flowsint/pull/136
Author: @dextmorgn
Created: 4/10/2026
Status: ✅ Merged
Merged: 4/11/2026
Merged by: @dextmorgn

Base: main ← Head: feat/rbac

📝 Commits (6)

1a5d164 feat(core): add RBAC with ADMIN role, collaborator management and auth user data
bb50237 feat(api): add collaborator endpoints, profile update, user search and backfill migration
f5e6fb7 feat(app): RBAC permission gating, share dialog, profile page and user display
ce1f50b chore: update yarn.lock
8cd6b23 fix(core/tests): update failing test
47b0c05 feat(app): RBAC permission gating, UserAvatar component, share dialog redesign and responsive grids

📊 Changes

56 files changed (+2561 additions, -753 deletions)

View changed files

➕ flowsint-api/alembic/versions/a1f2b3c4d5e6_backfill_owner_roles.py (+59 -0)
📝 flowsint-api/app/api/routes/auth.py (+42 -2)
📝 flowsint-api/app/api/routes/investigations.py (+148 -5)
📝 flowsint-api/app/api/schemas/investigation.py (+20 -14)
📝 flowsint-api/app/api/schemas/profile.py (+10 -1)
📝 flowsint-app/src/api/auth-service.ts (+12 -1)
📝 flowsint-app/src/api/investigation-service.ts (+24 -0)
📝 flowsint-app/src/api/query-keys.ts (+1 -0)
📝 flowsint-app/src/components/analyses/analyses-list.tsx (+14 -10)
📝 flowsint-app/src/components/analyses/analysis-editor.tsx (+22 -17)
📝 flowsint-app/src/components/dashboard/empty-states.tsx (+10 -7)
📝 flowsint-app/src/components/dashboard/investigation/analyses-section.tsx (+11 -8)
📝 flowsint-app/src/components/dashboard/investigation/case-header.tsx (+99 -69)
📝 flowsint-app/src/components/dashboard/investigation/case-overview-page.tsx (+4 -16)
📝 flowsint-app/src/components/dashboard/investigation/investigations-list.tsx (+3 -1)
📝 flowsint-app/src/components/dashboard/investigation/metrics-grid.tsx (+5 -4)
➕ flowsint-app/src/components/dashboard/investigation/share-dialog.tsx (+405 -0)
📝 flowsint-app/src/components/dashboard/investigation/sketches-section.tsx (+7 -4)
📝 flowsint-app/src/components/dashboard/overview/dashboard-stats.tsx (+3 -1)
📝 flowsint-app/src/components/layout/top-navbar.tsx (+34 -11)

...and 36 more files

📄 Description

add RBAC with ADMIN role, collaborator management and auth user data

Add ADMIN role to Role enum (OWNER > ADMIN > EDITOR > VIEWER)
Update permission matrix: ADMIN can read/create/update/manage
Fix get_with_relations bug filtering by owner_id (blocked non-owner collaborators)
Add collaborator management methods to InvestigationRepository and InvestigationService
Return user profile data in auth response

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/reconurge/flowsint/pull/136 **Author:** [@dextmorgn](https://github.com/dextmorgn) **Created:** 4/10/2026 **Status:** ✅ Merged **Merged:** 4/11/2026 **Merged by:** [@dextmorgn](https://github.com/dextmorgn) **Base:** `main` ← **Head:** `feat/rbac` --- ### 📝 Commits (6) - [`1a5d164`](https://github.com/reconurge/flowsint/commit/1a5d16480589287ccfe1ab82d00ba2131ec6d193) feat(core): add RBAC with ADMIN role, collaborator management and auth user data - [`bb50237`](https://github.com/reconurge/flowsint/commit/bb502379bd3a13ae598e1f0415b18a67060d26b0) feat(api): add collaborator endpoints, profile update, user search and backfill migration - [`f5e6fb7`](https://github.com/reconurge/flowsint/commit/f5e6fb79ae11beaa4dfc3c56955a99b876685e67) feat(app): RBAC permission gating, share dialog, profile page and user display - [`ce1f50b`](https://github.com/reconurge/flowsint/commit/ce1f50bb72a39789578abd3a4b4fd4d36afcfb0d) chore: update yarn.lock - [`8cd6b23`](https://github.com/reconurge/flowsint/commit/8cd6b237bbbf67a410611473eb56fde7b7038771) fix(core/tests): update failing test - [`47b0c05`](https://github.com/reconurge/flowsint/commit/47b0c05115e73b39fea90c0f34abdead22f32970) feat(app): RBAC permission gating, UserAvatar component, share dialog redesign and responsive grids ### 📊 Changes **56 files changed** (+2561 additions, -753 deletions) <details> <summary>View changed files</summary> ➕ `flowsint-api/alembic/versions/a1f2b3c4d5e6_backfill_owner_roles.py` (+59 -0) 📝 `flowsint-api/app/api/routes/auth.py` (+42 -2) 📝 `flowsint-api/app/api/routes/investigations.py` (+148 -5) 📝 `flowsint-api/app/api/schemas/investigation.py` (+20 -14) 📝 `flowsint-api/app/api/schemas/profile.py` (+10 -1) 📝 `flowsint-app/src/api/auth-service.ts` (+12 -1) 📝 `flowsint-app/src/api/investigation-service.ts` (+24 -0) 📝 `flowsint-app/src/api/query-keys.ts` (+1 -0) 📝 `flowsint-app/src/components/analyses/analyses-list.tsx` (+14 -10) 📝 `flowsint-app/src/components/analyses/analysis-editor.tsx` (+22 -17) 📝 `flowsint-app/src/components/dashboard/empty-states.tsx` (+10 -7) 📝 `flowsint-app/src/components/dashboard/investigation/analyses-section.tsx` (+11 -8) 📝 `flowsint-app/src/components/dashboard/investigation/case-header.tsx` (+99 -69) 📝 `flowsint-app/src/components/dashboard/investigation/case-overview-page.tsx` (+4 -16) 📝 `flowsint-app/src/components/dashboard/investigation/investigations-list.tsx` (+3 -1) 📝 `flowsint-app/src/components/dashboard/investigation/metrics-grid.tsx` (+5 -4) ➕ `flowsint-app/src/components/dashboard/investigation/share-dialog.tsx` (+405 -0) 📝 `flowsint-app/src/components/dashboard/investigation/sketches-section.tsx` (+7 -4) 📝 `flowsint-app/src/components/dashboard/overview/dashboard-stats.tsx` (+3 -1) 📝 `flowsint-app/src/components/layout/top-navbar.tsx` (+34 -11) _...and 36 more files_ </details> ### 📄 Description add RBAC with ADMIN role, collaborator management and auth user data - Add ADMIN role to Role enum (OWNER > ADMIN > EDITOR > VIEWER) - Update permission matrix: ADMIN can read/create/update/manage - Fix get_with_relations bug filtering by owner_id (blocked non-owner collaborators) - Add collaborator management methods to InvestigationRepository and InvestigationService - Return user profile data in auth response --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-05-24 12:46:32 -05:00

GiteaMirror closed this issue

2026-05-24 12:46:33 -05:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/flowsint#1989