hotel-manage-stack/kitchen
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
kitchen/backend/api
History
jtricerolph 6f6e16c88f Replace in-app Access Control with JWT cap enforcement 
The in-app page-restriction system (admin-only toggles in Settings) was
nav-hiding only and duplicated functionality already covered by JWT caps
in the main stack auth service. All 9 pages in the restriction list were
already gated in Layout.tsx by existing caps.

Backend: add router-level requireCap() to enforce caps at the API layer:
- reports.py: Depends(require_cap("view"))
- logbook.py: Depends(require_cap("logbook"))
- search.py: Depends(require_cap("invoices"))

Frontend: remove the Access Control settings section entirely:
- Drop pageRestrictions query, restrictedPages/accessSaveMessage state,
  savePageRestrictionsMutation, isSectionAccessible helper
- Remove 'access' from SettingsSection type and sidebarItems
- Strip restrictPath from all sidebar items (no longer needed)

Access management is now fully centralised in the main stack auth service.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-07-12 23:17:22 +00:00
..
__init__.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
backup.py Add get_current_user_from_token to auth.py; fix missing import in 3 api files 2026-07-12 12:34:01 +00:00
budget.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
calendar_events.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
cost_distributions.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
cover_overrides.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
credit_notes.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
disputes.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
event_orders.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
external.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
field_mappings.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
food_flags.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
imap.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
ingredients.py Add get_current_user_from_token to auth.py; fix missing import in 3 api files 2026-07-12 12:34:01 +00:00
internal.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
invoices.py Fix PDF viewing: cookie auth fallback + .mjs MIME type 2026-07-12 21:34:51 +00:00
kds_settings.py Fix 413 upload limit + add /api/kds/settings to kitchen backend 2026-07-12 17:47:28 +00:00
logbook.py Replace in-app Access Control with JWT cap enforcement 2026-07-12 23:17:22 +00:00
menus.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
newbook.py Add 'use main stack settings' toggle for third-party integration credentials 2026-07-12 21:57:10 +00:00
public.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
purchase_orders.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
recipes.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
reconciliation.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
reports.py Replace in-app Access Control with JWT cap enforcement 2026-07-12 23:17:22 +00:00
residents_table_chart.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
resos.py Add 'use main stack settings' toggle for third-party integration credentials 2026-07-12 21:57:10 +00:00
sambapos.py Add 'use main stack settings' toggle for third-party integration credentials 2026-07-12 21:57:10 +00:00
search.py Replace in-app Access Control with JWT cap enforcement 2026-07-12 23:17:22 +00:00
settings.py Wire Azure OCR to central settings toggle; remove redundant Users section 2026-07-12 22:58:32 +00:00
suppliers.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00
support.py Restore api/migrations/models/services source files accidentally removed in gitignore commit 2026-07-12 12:16:28 +00:00