Florian Sylvain 094df63a7f feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

..

apiKeyMapper.go

feat: integration v2 and API key PART 1/3

2026-10-04 21:56:14 +02:00

articleMapper.go

feat: roles system backend

2026-10-26 05:02:49 +01:00

auditMapper.go

feat: setup logs retention by max file size

2026-10-07 22:02:13 +02:00

authorMapper.go

feat: Authors feature backend (and upgraded deprecated mods)

2026-10-14 17:45:00 +02:00

contentTypeMapper.go

feat: custom content type icons, built-in types, user lookup

2026-10-19 18:22:55 +02:00

entryMapper.go

feat: custom content types backend

2026-10-19 17:01:37 +02:00

imageMapper.go

feat(API): media library

2026-09-30 18:35:28 +02:00

imageVariantMapper.go

feat: image variants engine

2026-10-08 02:33:32 +02:00

inviteMapper.go

feat(API): user invitations and emails

2026-09-29 07:15:17 +02:00

purgeSettingsMapper.go

feat: media duplicate purge, part 1 of 3: persisted purge settings and the purge API

2026-10-05 18:24:03 +02:00

roleMapper.go

feat: /v1/role list, get, create, update and delete. Reassign members on delete. Write-time validation (ValidateGrants, duplicates, typed keys against real content types). Name uniqueness (role_name_taken), role_locked, role_has_members, role_conflict on version mismatch. No-escalation: nobody grants a permission they don't hold, and roles.edit_owner_only guards the Owner role. Activity events for role changes. Typed-key exposure in /auth/me. Cleanup of typed rows when a content type is deleted. | Backend only. Will carry the deferred ListGrants decision.

2026-10-27 00:45:24 +01:00

sessionMapper.go

fix: security & privacy (rate limiter fix, csrf session cookie, logout on server, drafts stale token passw, login timing, password over 72b, JWT_SECRET complexity, SMTP TLS, CSV export neutralised, fonts bundled, upload metadata, hourly cleanup job, privacy.md report)

2026-10-22 00:49:19 +02:00

siteMapper.go

feat: SEO backend data (1/4)

2026-10-15 19:30:29 +02:00

userMapper.go

feat: roles system backend

2026-10-26 05:02:49 +01:00