Pulse/pkg/auth
rcourtman 2ebe65bbc5 security: add scope checks to AI Patrol and agent profile endpoints
- AI Patrol mutation endpoints (acknowledge, dismiss, suppress, snooze, resolve,
  findings/note, suppressions/*) now require ai:execute scope to prevent
  low-privilege tokens from blinding patrol by hiding/suppressing findings

- Agent profile admin endpoints (/api/admin/profiles/*) now require
  settings:write scope to prevent low-privilege tokens from modifying
  fleet-wide agent behavior
2026-02-03 19:29:56 +00:00
..
auth_test.go feat: remove Enterprise badges, simplify Pro upgrade prompts 2026-01-09 16:51:08 +00:00
authorizer.go feat(rbac): add OIDC group mapping tests and audit logging for RBAC actions 2026-01-09 19:25:33 +00:00
coverage_test.go feat: remove Enterprise badges, simplify Pro upgrade prompts 2026-01-09 16:51:08 +00:00
password.go feat: remove Enterprise badges, simplify Pro upgrade prompts 2026-01-09 16:51:08 +00:00
permissions.go security: add scope checks to AI Patrol and agent profile endpoints 2026-02-03 19:29:56 +00:00
policy_evaluator.go feat(auth): add policy evaluator and SQLite auth manager for RBAC 2026-01-12 15:20:49 +00:00
policy_evaluator_test.go feat(auth): add policy evaluator and SQLite auth manager for RBAC 2026-01-12 15:20:49 +00:00
rbac.go fix(agent): add FreeBSD platform support to agent download and UI (#1051) 2026-01-11 23:51:12 +00:00
rbac_manager.go fix: replace hallucinated upgrade URLs with correct pulserelay.pro 2026-01-10 22:45:40 +00:00
rbac_manager_test.go fix: replace hallucinated upgrade URLs with correct pulserelay.pro 2026-01-10 22:45:40 +00:00
sqlite_manager.go fix: harden SQLite against I/O contention causing persistent lock errors 2026-02-02 17:29:14 +00:00
sqlite_manager_test.go feat(auth): add policy evaluator and SQLite auth manager for RBAC 2026-01-12 15:20:49 +00:00
token.go feat: remove Enterprise badges, simplify Pro upgrade prompts 2026-01-09 16:51:08 +00:00