Jatuhkan permainan dari KnownAliases; abaikan legacy play dari verify- dns
Lewati pembaharuan model keamanan ketika kunci peran menyunting keamanan
Baca hak sesi sebagai daftar atau CSV warisan untuk titik akhir anggota
KSesionService dan SecurityRoleController hak sebagai Daftar < String > dari Nama RoleRightType. Menmber SecurityController cast to String and split on koma, me...
Verify- dns memeriksa setiap KnownAliseses label; lewati aplikasi / media yang sudah ditinggalkan dalam opsional
Align KnownAliseses dengan DNS dan auto- cert (tambahkan surat, putar, aplikasi, tanda tangani; taruh aplikasi, media)
Hindari transisi - keracunan DDL dan keraskan multi- pod ras
Diri sebelumnya-menyembuhkan menempatkan DDL dalam @ Transaksional syncAll (). Ketika ALTER TABEL ADD CONSTRAINT dipecat pada batasan yang ada (kasus normal set...
Membuat RoleRightsSyncService sepenuhnya penyembuhan diri pada setiap boot
Menambahkan atau menghapus RoleRightType tak boleh lagi memerlukan proses KamoInitializerService. syncAll () sekarang berjalan tiga fase pada setiap startup: 1...
Hapus panggilan getType () dari Organisasi Kontroller setelah Organisasi Tipe penghapusan
Set orgOriginal pada registrasi dan ekspos adalah original org dalam jaringan saya
Ekstrak RoleRightsSyncService dan tambahkan sync-rights titik akhir
- RoleRightsSyncService: pusat hak-hak peran sync logika untuk kedua Orolole dan... tabel; startup dan on- permintaan - DataLoader: delegasi ke RoleRightsSyncSe...
Tambahkan PATCH / keanggotaan titik akhir untuk promosi / penurunan anggota
Gunakan getOrganization ByIdWithFeatures dalam Appability Interceptor
Selesaikan Eksepsi LazyInitialization pada / api / security / lead dan semua jalan CRM / POS-gated lainnya. Pencegatan bernama org.getFeatures () setelah transa...
Resolve Anggota tab menunjukkan kosong karena masalah TIPE Hibernasi () base- class
Tipe filter JPQL menghasilkan 0 hasil ketika terikat parameter adalah kelas dasar Anggota (Warisan JOINED). Hal ini mempengaruhi Anggota - pelanggan titik akhir...
Aktifkan log Hibernate SQL untuk mendiagnosa query anggota kembali 0
Sementara diaktifkan org.hibernate.QL = DEBUG untuk melihat apa yang SQL TIPE () Query JPQL menghasilkan untuk keanggotaan-pelanggan titik akhir.
Tambahkan log diagnostik ke getmembersAndSubscribers titik akhir
Log orgId, hasil query count, dan per- anggota isaktif status untuk membantu mendiagnosa mengapa tab anggota menunjukkan daftar kosong.
Allow god-mode users to provision ownerless orgs; prefer FQDNs in domain resolution
Add @Transactional to provision-theme for lazy domain loading; remove hardcoded domain from provision request
Add PATCH /org/{id}/colors endpoint to safely update only color palette fields
Add theme provisioning — NATS publisher, provision-theme endpoint, logo upload
Use memberID session key and include creatorType in creatable branch-types response
Add GET /branch-types/creatable and /{id}/usages endpoints
/creatable returns branch types filtered by the caller's creator-type (OWNERS/TEAM_MEMBERS/MEMBERS) via AppliedModelEnforcementService. /{id}/usages returns th...
Use correct session key 'memberID' instead of 'MID'
KSessionService stores member ID under key 'memberID' but both **************** and OrganizationController were reading session.get("MID") which always returned...
Exclude master model from models list; add debug log to child-org creation check
SecurityModelController now filters out the org's master model (identified by org.getMasterModelID()) from the /api/security/models response — it is managed exc...
Read session rights as List<String> names, not CSV of integer IDs
Session rights are stored as a JSON array of RoleRightType name strings. Both **************** and OrganizationController were casting them to String (causing C...
Add GET /branch-types/creatable endpoint with creator-type filtering
Returns only the branch types the calling member is permitted to create a child org under, based on their OWNERS/TEAM_MEMBERS/MEMBERS classification against the...
Gate /network child-org creation by right + member-type applicability
Wires the applied-security-model child-org creation gate end-to-end: - SecurityModelController + MasterModelController round-trip the three new apply-to flag...
Bangun ulang untuk kamo- shared-library update (appConfig upsert -only fix)
Pulls the hardest * * * * * * * * * * * * * * * * * * * * * bahwa tidak lagi menghapus baris appConfig yang jenis layanan tidak hadir dari payload penelepon - m...
Applied-model is the read-time source of truth for feature availability
Closes the "stale DB leaks a disabled feature" gap by gating every surface that touches OrgFeature / ServiceType through the applied security model. - ********...
Root- permukaan menyebabkan kegagalan GT MasterModelController
Ketika GET / api / keamanan / master- model 500s, log the full stack trace to stderr (ditangkap oleh log kubectl) dan termasuk pesan root- penyebab di kawat dar...
Wire applied-model enforcement across every controller
Every non-role setting on the applied security model is now enforced at the exact controller boundary it governs, and the scalar settings round-trip cleanly thr...
Enforce system-role assignment and auto-admin for team-member owners
MemberSecurityController now enforces the three assignment invariants defined in the brainstorm spec: - saveMemberSecurity: before persisting the caller's requ...
Master-model + applied-model endpoints and template-aware org seeding
Adds the controllers that surface the new branch-type security flow: - /api/security/master-model (GET/PUT) manages the current org's master model; only writ...
Add org-scoping, password length validation, and code quality improvements to PasswordChangeController
Add @Transactional to DataLoader.run to fix LazyInitializationException on startup
Use JPA entity traversal for grant-all detection (covers dept/job roles)
Supplement session rights with all known rights for grant-all roles
Filter null rights in buildAppliedRightsWithSources; upgrade shared-lib to 1.5.0
Use core NATS pub/sub for email-verified SSE fan-out
Replaces in-memory ConcurrentHashMap broadcast with NATS core pub/sub so all pods receive verification events regardless of which pod handled the token. Falls b...
Add SSE endpoint for real-time email verification + improve welcome email logging
Add resetCode to password reset email, add emailVerifyByCode endpoint, send WELCOME_MEMBER after email verification
Use avatarType field + JDBC for photo URL generation to handle Hibernate proxies
**************** previously used instanceof AvatarPhoto to determine avatar type and cast to read fileExtension. When Hibernate returns a base-class proxy (e.g....
Pass human-readable expiry time to email verification template
Add humanizeMinutes() helper that formats minutes as days/hours/minutes (e.g. "1 day" for 1440 min). Pass as {{expiryText}} to match updated canonical template ...
Seperti apa yang Anda lihat pengiriman?
Semua pembaruan ini secara otomatis mendarat di ruang kerja Anda. Mulai bebas dan menontonnya tumbuh minggu demi minggu.