meshcore-hub

mirror of https://github.com/ipnet-mesh/meshcore-hub.git synced 2026-07-26 11:33:12 +02:00

Files

T

History

Louis King 83a936cd33 feat(routes): allow operators to manage routes

Operators can now create, edit, and delete routes (previously admin-only).
A user may never scope a route above their own role tier: an operator
creating/editing an admin-visibility route is rejected (403 on the
visibility value, 404 on touching an existing higher-visibility route),
preventing them from creating routes they could then never see or modify.

- routes.py: RequireAdmin -> RequireOperatorOrAdmin on create/update/delete;
  add visibility-cap enforcement helpers reusing the existing
  resolve_user_role / VISIBILITY_LEVELS ladder
- web/app.py: proxy access map admits operator for routes POST/PUT/DELETE
- Routes.tsx: canManage gate (admin||operator) on Add/Edit/Delete; visibility
  <select> filters options by caller tier so operators never see 'admin'
- tests: operator-tier coverage (create/update/delete at/below/above level),
  proxy access-map assertion, vitest role-gating + filtered select
- e2e: mint operator session + routes-operator spec
- docs: routes.md + auth.md operator/visibility-cap notes

2026-07-24 20:59:25 +01:00

__init__.py

Implement Phase 1: Foundation for MeshCore Hub

2025-12-02 23:10:53 +00:00

conftest.py

feat(web): frontend CI, vitest suite, navbar→React SPA shell — Phase 5

2026-07-21 20:06:52 +01:00

test_advertisements.py

chore(web): remove lit-html fallback & legacy code — Phase 4

2026-07-21 19:13:01 +01:00

test_app.py

feat(routes): allow operators to manage routes