Commit Graph

13 Commits

Author SHA1 Message Date
Cheng Zhou b491b6a146 发布候选:整合桌面端界面与发布稳定化里程碑
Client Quality Gates / Shared client and Web (push) Has been cancelled
Client Quality Gates / macOS Desktop (push) Has been cancelled
Storage Persistence Guard / storage-persistence-audit (push) Has been cancelled
Client Quality Gates / Shared client and Web (pull_request) Has been cancelled
Client Quality Gates / macOS Desktop (pull_request) Has been cancelled
Storage Persistence Guard / storage-persistence-audit (pull_request) Has been cancelled
2026-07-01 10:53:24 +08:00
Cheng Zhou 84e55af8fe 优化后台界面与无操作退出体验 2026-06-10 15:20:06 +08:00
Cheng Zhou 63457aab11 支持开发环境局域网登录测试 2026-05-29 09:39:18 +08:00
Cheng Zhou 5b97ea32ab 移除用户系统级角色,权限完全迁移至项目级管理
- 用户注册/创建不再需要选择角色,账号管理只管资料和状态
- 移除前后端所有系统级 role 字段的暴露,改用 is_admin 标识管理员
- PM(项目负责人)角色自动拥有全部项目权限且不可修改
- 系统管理员在项目中的成员身份不可被删除
- 管理界面全面美化

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-20 15:52:17 +08:00
Cheng Zhou 939fc70532 权限管理:接入项目级权限矩阵
新增项目级角色权限矩阵,覆盖 PM、CRA、PV、IMP、QA 等项目角色,并通过迁移表持久化各业务模块的读写权限。

后端将参与者、合同费用、物资、启动、里程碑、风险问题、监查稽查、FAQ、共享库、文件版本等接口接入矩阵校验,修复审计日志导出权限和登录 502 的依赖导入问题。

前端新增权限管理页面和项目路由权限映射,按矩阵控制导航显示、直接访问拦截、操作按钮启停,并限制管理后台仅 admin 和授权 PM 可进入。

补充后端权限归一化与接口静态测试、前端路由/权限工具/权限管理页面/工作台等回归测试。
2026-05-13 08:58:03 +08:00
Cheng Zhou 74feca4467 feat: harden auth and study workflows
- replace plaintext login and unlock requests with RSA-OAEP/AES-GCM encrypted payloads

- add login challenge replay protection, production RSA key validation, and auth tests

- wire compose to environment-driven dev/prod settings without committing local secrets

- update setup-config smoke scripts and Postman docs for encrypted login

- add visit schedule migrations/tests and update study/subject setup workflows
2026-05-08 22:16:43 +08:00
Cheng Zhou 4c98147f3e 登录页UI及长时间未操作锁定逻辑优化 2026-03-10 10:10:58 +08:00
Cheng Zhou fd7e3fc948 项目里程碑初步优化 2026-02-27 09:06:06 +08:00
Cheng Zhou 8f3f717e48 立项配置页初步优化 2026-02-24 16:53:22 +08:00
Cheng Zhou 0c7c03069a 新增空闲锁屏、修复401等问题,新增文件版本管理、共享库等占位符 2026-01-13 13:59:07 +08:00
Cheng Zhou 6ddf9901a0 新增用户注册功能 2025-12-22 21:19:48 +08:00
Cheng Zhou cc54d80b3a Step F2:项目列表 & 当前项目上下文 2025-12-16 20:31:20 +08:00
Cheng Zhou 78d13d077c Step F1:前端工程骨架 & 登录鉴权 2025-12-16 20:21:30 +08:00