e7a658c7fa
All checks were successful
CI Trade-In / changes (pull_request) Successful in 10s
CI / changes (pull_request) Successful in 10s
CI Trade-In / frontend-checks (pull_request) Has been skipped
CI / backend-tests (pull_request) Has been skipped
CI / frontend-tests (pull_request) Has been skipped
CI / openapi-codegen-check (pull_request) Has been skipped
CI Trade-In / backend-tests (pull_request) Successful in 1m56s
Migration 193: переносит org-карту (admin/kopylov/praktika/user1-10), утверждённую владельцем продукта, из auth/roles.yaml в tradein_users (Foundation — миграция 192). password_hash=NULL для всех — пароли админ проставит вручную через team-UI (#2556). ASCII-CHECK на username (deep-review #2561): rbac кодирует session-username через encode("latin-1","replace"), кириллические логины одинаковой длины схлопываются в общий downstream-identity (IDOR) — constraint запрещает это fail-closed. ON CONFLICT DO UPDATE защищает password_hash/is_active/display_name/org_name/email через COALESCE — повторный прогон (recovery / staging без _schema_migrations tracking) не затирает то, что менеджер поменял через UI. |
||
|---|---|---|
| .. | ||
| app | ||
| data/sql | ||
| scripts | ||
| tests | ||
| .dockerignore | ||
| Dockerfile | ||
| pyproject.toml | ||