curo1305andClaude Sonnet 4.6 fec3953009 feat: category scopes, group-admin role, and permission model ...

- Three category scopes: personal / group / system (watch)
- PascalCase-with-dashes naming convention enforced at backend + frontend
- is_group_admin flag on GroupMembership; PATCH endpoint for admins to toggle it
- Categories router: scope-based list/create/rename/delete with _check_can_manage_cat
- Documents router: delete uses is_admin + can_delete share flag + group-admin check; remove_category requires doc ownership; assign_category accepts group/system categories
- Proxy layers inject x-user-is-admin and x-user-admin-groups headers
- Frontend: ManageCategoriesDialog grouped by scope with lock icons; SourcePanel scope picker + client-side name validation; AdminGroupsPage group-admin checkbox

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-18 22:16:49 +02:00

..

2026-04-12_docker-fixes.md

Fix Docker build: lockfile, BuildKit DNS, and setuptools build backend

2026-04-12 15:40:18 +02:00

2026-04-12_dockerize.md

Dockerize backend, frontend, and database into separate containers

2026-04-12 15:22:04 +02:00

2026-04-12_initial-scaffold.md

Add README, changelog directory, and changelog convention to CLAUDE.md

2026-04-12 15:14:44 +02:00

2026-04-12_proxy-fix-success-pages.md

Fix Vite proxy inside Docker and add success pages

2026-04-12 16:12:35 +02:00

2026-04-12_security-validation.md

Add test user seed, password validation, and pre-commit security hook

2026-04-12 15:54:23 +02:00

2026-04-12_troubleshooting.md

Fix dev stack startup: seed path, missing migration, passlib/bcrypt incompatibility

2026-04-12 16:03:03 +02:00

2026-04-13_jwt-expiry.md

Harden JWT: 8-hour expiry, add JWT vulnerability checks

2026-04-13 22:54:53 +02:00

2026-04-13_penpot-decision.md

Switch UX/UI tooling to self-hosted Penpot; add setup checklist

2026-04-13 22:07:44 +02:00

2026-04-13_profile-sanitization.md

Add profile feature, input sanitization, and stronger security checks

2026-04-13 18:15:47 +02:00

2026-04-13_rootless-containers.md

Align all app containers to UID 1001, add infra protocol, update README

2026-04-13 17:29:02 +02:00

2026-04-13_rs256-jwt.md

Switch JWT signing from HS256 to RS256 (4096-bit RSA)

2026-04-13 23:00:35 +02:00

2026-04-14_doc-service-tests-suggestions.md

Add shared ai-service container as AI provider intermediary

2026-04-14 12:30:45 +02:00

2026-04-14_doc-service.md

Add priority queue to ai-service and STATUS.md workflow

2026-04-14 22:58:10 +02:00

2026-04-14_network-isolation.md

Isolate backend and db from host: two Docker networks

2026-04-14 00:06:38 +02:00

2026-04-17_comprehensive-claude-md.md

Rewrite CLAUDE.md as permanent authoritative session context

2026-04-17 21:26:23 +02:00

2026-04-17_customizable-home-dashboard.md

Add customizable home dashboard with per-user pinned apps

2026-04-17 21:15:33 +02:00

2026-04-17_groups-and-admin-nav.md

Make bcrypt work factor explicit (13 rounds)

2026-04-17 20:58:02 +02:00

2026-04-17_service-health-checks.md

Add service health checks and dynamic Apps page

2026-04-17 17:31:36 +02:00

2026-04-17_switch-penpot-to-figma.md

Add re-analyse button and POST /documents/{id}/reprocess endpoint

2026-04-17 17:00:17 +02:00

2026-04-18_category-scopes-group-admin.md

feat: category scopes, group-admin role, and permission model

2026-04-18 22:16:49 +02:00

2026-04-18_doc-service-redesign.md

Redesign doc service UX for scale + add group-based document sharing

2026-04-18 12:46:43 +02:00

2026-04-18_plugin-arch-watch-feature.md

Add generic plugin architecture and watch-directory feature

2026-04-18 02:09:50 +02:00

2026-04-18_service-admin-groups-combined-settings.md

Add service admin groups, combined settings pages, single Settings button

2026-04-18 02:49:57 +02:00