n.siegfried
39b48055ff
Brings the Work Package Suite from a browser-local prototype to a multi-tenant, SQL-backed deployment hardened for customer IP. Auth & access control - Local username/password login (bcrypt + JWT in an HttpOnly cookie), admin-managed users, per-project membership, and project-scoped API access. - Admin console: change user roles, view the audit trail, manage settings. Security hardening - CSP / HSTS / X-Frame-Options / nosniff headers in nginx; Secure cookie via X-Forwarded-Proto; CSRF Origin check; attribute-safe output escaping. - Login lockout, token_version session revocation, stronger password policy, fail-closed secret loading, encrypted (AES-256) database backups. Persistence & schema - SOPs and Work Packages are now DB-backed and shared across users, written through a durable client sync outbox that queues offline edits. - Alembic migrations applied automatically on container start. New capabilities - Phase 2 dashboard (progress, gating, pagination, archive). - Phase 3 PWA "Field View" with offline caching and auth fallback. - WP owner assignment with OPTIONAL email notifications, OFF by default and toggled from the admin console. SMTP password is read only from the SMTP_PASSWORD env var (never stored); emails carry a WP number + deep link, never customer IP. Also: IBM Carbon restyle, Help section, and DEPLOYMENT.md brought up to date. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
49 lines
2.0 KiB
Python
49 lines
2.0 KiB
Python
"""audit log
|
|
|
|
Revision ID: 4e094197c9aa
|
|
Revises: c6af106a04da
|
|
Create Date: 2026-07-15 10:12:52.859694
|
|
"""
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
|
|
|
|
# revision identifiers, used by Alembic.
|
|
revision = '4e094197c9aa'
|
|
down_revision = 'c6af106a04da'
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
# ### commands auto generated by Alembic - please adjust! ###
|
|
op.create_table('audit_log',
|
|
sa.Column('id', sa.String(length=40), nullable=False),
|
|
sa.Column('at', sa.DateTime(timezone=True), nullable=False),
|
|
sa.Column('actor', sa.String(length=200), nullable=False),
|
|
sa.Column('action', sa.String(length=60), nullable=False),
|
|
sa.Column('entity_type', sa.String(length=40), nullable=False),
|
|
sa.Column('entity_id', sa.String(length=40), nullable=False),
|
|
sa.Column('project_id', sa.String(length=40), nullable=True),
|
|
sa.Column('summary', sa.String(length=400), nullable=False),
|
|
sa.Column('detail', sa.JSON(), nullable=False),
|
|
sa.PrimaryKeyConstraint('id')
|
|
)
|
|
op.create_index(op.f('ix_audit_log_action'), 'audit_log', ['action'], unique=False)
|
|
op.create_index(op.f('ix_audit_log_at'), 'audit_log', ['at'], unique=False)
|
|
op.create_index(op.f('ix_audit_log_entity_id'), 'audit_log', ['entity_id'], unique=False)
|
|
op.create_index(op.f('ix_audit_log_entity_type'), 'audit_log', ['entity_type'], unique=False)
|
|
op.create_index(op.f('ix_audit_log_project_id'), 'audit_log', ['project_id'], unique=False)
|
|
# ### end Alembic commands ###
|
|
|
|
|
|
def downgrade() -> None:
|
|
# ### commands auto generated by Alembic - please adjust! ###
|
|
op.drop_index(op.f('ix_audit_log_project_id'), table_name='audit_log')
|
|
op.drop_index(op.f('ix_audit_log_entity_type'), table_name='audit_log')
|
|
op.drop_index(op.f('ix_audit_log_entity_id'), table_name='audit_log')
|
|
op.drop_index(op.f('ix_audit_log_at'), table_name='audit_log')
|
|
op.drop_index(op.f('ix_audit_log_action'), table_name='audit_log')
|
|
op.drop_table('audit_log')
|
|
# ### end Alembic commands ###
|