 Rokojori
|
815c4423ce
|
Add requireAccess middleware, products admin route, and lookup-email endpoint
- requireAccess.ts: flexible role+product access rules for per-service gating
- PATCH /api/admin/users/:id/products: superadmin can assign products to users
- POST /api/auth/lookup-email: server-to-server email→userId lookup via SERVICE_SECRET
- workspace/index.html: documented per-service access control design
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-07-15 07:06:39 +02:00 |