Cheng Zhou
|
939fc70532
|
权限管理:接入项目级权限矩阵
新增项目级角色权限矩阵,覆盖 PM、CRA、PV、IMP、QA 等项目角色,并通过迁移表持久化各业务模块的读写权限。
后端将参与者、合同费用、物资、启动、里程碑、风险问题、监查稽查、FAQ、共享库、文件版本等接口接入矩阵校验,修复审计日志导出权限和登录 502 的依赖导入问题。
前端新增权限管理页面和项目路由权限映射,按矩阵控制导航显示、直接访问拦截、操作按钮启停,并限制管理后台仅 admin 和授权 PM 可进入。
补充后端权限归一化与接口静态测试、前端路由/权限工具/权限管理页面/工作台等回归测试。
|
2026-05-13 08:58:03 +08:00 |
|
Cheng Zhou
|
77e842637d
|
中文:收口权限与中心/立项配置改造
|
2026-05-12 10:16:52 +08:00 |
|
Cheng Zhou
|
20d45cfdfe
|
修复项目配置草稿原子保存逻辑
|
2026-05-11 11:03:06 +08:00 |
|
Cheng Zhou
|
f6a7a3d6ee
|
修复工作流表删除迁移幂等
|
2026-05-11 08:54:45 +08:00 |
|
Cheng Zhou
|
4592ff375d
|
修复迁移幂等并补部署检查
|
2026-05-11 08:45:41 +08:00 |
|
Cheng Zhou
|
917ab7ccf1
|
feat: refine subject visits and project workflows
Add early termination visit workflow with ordering, non-applicable visit handling, visit window display, and medication adherence support.
Extend monitoring visit issue template fields, site scoping, setup draft project info handling, login security UI, attachment behavior, and related tests/migrations.
|
2026-05-09 17:10:34 +08:00 |
|
Cheng Zhou
|
74feca4467
|
feat: harden auth and study workflows
- replace plaintext login and unlock requests with RSA-OAEP/AES-GCM encrypted payloads
- add login challenge replay protection, production RSA key validation, and auth tests
- wire compose to environment-driven dev/prod settings without committing local secrets
- update setup-config smoke scripts and Postman docs for encrypted login
- add visit schedule migrations/tests and update study/subject setup workflows
|
2026-05-08 22:16:43 +08:00 |
|
Cheng Zhou
|
4bebc64662
|
feat: 清理示例数据并统一空态体验
|
2026-03-31 11:20:57 +08:00 |
|
Cheng Zhou
|
27ba5eabff
|
feat: 移除仓库内 nginx 并拆分前端运行时
|
2026-03-30 22:04:15 +08:00 |
|
Cheng Zhou
|
8c5d03f1cb
|
移除示例项目初始化并修复前后端稳定性问题
|
2026-03-30 15:35:22 +08:00 |
|
Cheng Zhou
|
a67991740e
|
feat: 统一生产初始化流程并保护系统管理员
|
2026-03-27 17:26:46 +08:00 |
|
Cheng Zhou
|
6ddf9901a0
|
新增用户注册功能
|
2025-12-22 21:19:48 +08:00 |
|