Commit graph

3 commits

Author SHA1 Message Date
lekss361
496f18e16d feat(tradein): аккаунт praktika + лимит 15 оценок/мес, чистка брендинга PRINZIP в UI
Account quota (server-side, по X-Authenticated-User):
- новая таблица account_estimate_usage (миграция 076, идемпотентная)
- app/services/account_quota.py: 15 успешных оценок в календарный месяц на аккаунт
- enforcement в POST /estimate (429 при исчерпании) + GET /quota
- admin и kopylov — без лимита; нет заголовка (dev) → fail-open
- frontend: useQuota hook, счётчик «осталось N из 15», блок формы + баннер
  «Свяжитесь с Артёмом Копыловым» при исчерпании

Account praktika:
- caddy/users.caddy.snippet + auth/roles.yaml (роль pilot)

Брендинг PRINZIP убран только из UI (футер + css-коммент); таблица brands,
PDF white-label и скрейпер Яндекса (реальный застройщик PRINZIP) не тронуты.
2026-05-29 01:00:24 +03:00
c08e4d7811 feat(rbac): pilot scope → только /trade-in/** (#587)
All checks were successful
Deploy Trade-In / changes (push) Successful in 6s
Deploy / changes (push) Successful in 5s
Deploy Trade-In / build-frontend (push) Has been skipped
Deploy Trade-In / build-backend (push) Successful in 26s
Deploy / build-backend (push) Successful in 28s
Deploy / build-worker (push) Successful in 28s
Deploy / build-frontend (push) Successful in 27s
Deploy Trade-In / deploy (push) Successful in 36s
Deploy / deploy (push) Successful in 55s
Decision 2026-05-26: pilot не видит landing/analytics/site-finder/concept, только Trade-In.
2026-05-26 07:40:44 +00:00
88cdfd6adb feat(rbac): role-based access control via X-Authenticated-User middleware (#585)
All checks were successful
Deploy Trade-In / changes (push) Successful in 5s
Deploy / changes (push) Successful in 6s
Deploy Trade-In / build-frontend (push) Successful in 27s
Deploy / build-frontend (push) Successful in 30s
Deploy Trade-In / build-backend (push) Successful in 1m8s
Deploy Trade-In / deploy (push) Successful in 45s
Deploy / build-backend (push) Successful in 2m40s
Deploy / build-worker (push) Successful in 3m20s
Deploy / deploy (push) Successful in 1m16s
Backend RBAC + Caddy header_up. Closes part of #fixes-rbac-pra.
2026-05-26 06:18:40 +00:00