busya/ss-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
Files
cd4b91daa5ba3dc6a6422a402cfd3ffb53c2a386
ss-tools/backend/tests
History
busya cd4b91daa5 fix(rbac): close critical auth gaps — full RBAC audit remediation 
CRITICAL — unauthenticated endpoints (CWE-306):
- agent_superset.py: 10 SQL/dashboard/dataset proxy endpoints → plugin:superset_proxy:EXECUTE
- agent_superset_explore.py: 10 database explore endpoints → plugin:superset_proxy:READ
- clean_release.py / clean_release_v2.py: router-level deny-by-default → clean_release:MANAGE
- settings.py: PUT/DELETE/test environment → admin:settings:WRITE/READ
- tasks.py: log/stats/sources/export → tasks:READ

HIGH — authorization gaps (CWE-285, CWE-613):
- require_api_key_or_jwt: add token blacklist + is_active + is_admin flag checks
- get_current_user: add is_active check
- WebSocket: add _authorize_websocket() RBAC helper, permission-gate all 6 WS endpoints
- agent_conversations: add Depends(get_current_user) to save endpoint + router-level guard
- legacy validation redirect: add validation.task:VIEW guard

MEDIUM — consistency & architecture:
- admin.py: fix permission parsing split(':',1) → rsplit(':',1)
- app.py lifespan: sync RBAC permission catalog at startup
- schemas/auth.py: add is_admin to RoleSchema (with BeforeValidator), RoleCreate, RoleUpdate
- models/auth.py: add is_admin support in create_role/update_role handlers
- permissions.ts: expand KNOWN_ACTIONS (VIEW/CREATE/EDIT/MANAGE/APPROVE/PREVIEW/LAUNCH/LAUNCH_PROD)
- permissions.ts: isAdminUser checks is_admin flag from /auth/me
- Navbar.svelte: replace exact role name check with hasPermission()
- admin/+page.svelte, admin/settings/llm/+page.svelte: add ProtectedRoute guards

TESTS:
- test_dependencies_unit.py: fix 5 tests for new is_token_blacklisted + is_admin checks
- test_api_key_auth.py: fix test_jwt_precedence for is_token_blacklisted mock
- permissions.test.ts: update non-KNOWN_ACTION test to use unknown suffix 'xyz'

VERIFIED: 230 backend tests pass, 3257 frontend tests pass, index rebuilt (7373 contracts, 3832 edges)
2026-07-23 12:38:19 +03:00
..
api
fix(tests): repair 39 broken tests after auth/authz hardening
2026-07-23 12:32:50 +03:00
core
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
fixtures
feat(agent-chat): 035-agent-chat-context — контекст, guardrails, tools, database discovery
2026-07-04 22:47:17 +03:00
integration
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
models
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
plugins
fix(tests): use module-level _should_retry instead of LLMClient._should_retry
2026-07-23 11:59:44 +03:00
schemas
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
scripts
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
services
feat(git): BI-first UI/UX rework of /git — wizard modal, smart grid, undo, pre-flight
2026-07-22 18:06:26 +03:00
test_agent
refactor(agent): extract agent+shared into standalone packages with full GRACE semantic markup
2026-07-07 15:18:24 +03:00
test_core
feat: session timeout management + LLM provider error hardening
2026-07-23 11:27:17 +03:00
conftest.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_alembic_migrations.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_api_key_auth.py
fix(rbac): close critical auth gaps — full RBAC audit remediation
2026-07-23 12:38:19 +03:00
test_api_key_model.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_api_key_routes.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_app_handlers.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_app_lifespan.py
fix(tests): repair 39 broken tests after auth/authz hardening
2026-07-23 12:32:50 +03:00
test_app_middleware.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_app_spa.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_app_ws_auth.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_app_ws_endpoint.py
fix(tests): repair 39 broken tests after auth/authz hardening
2026-07-23 12:32:50 +03:00
test_app_ws_events.py
fix(tests): repair 39 broken tests after auth/authz hardening
2026-07-23 12:32:50 +03:00
test_auth.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_clean_release_dto_enums_exceptions.py
test: 8 parallel agents — fix 150+ failures, add 30+ test files. schemas/models 99-100%, core/client_registry ~98%, maintenance 95-98%, git edges 97%, translate 98-100%, dashboard routes 95-96%, dataset_review 100%
2026-06-15 17:31:43 +03:00
test_connection_service.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_constants_audit_fixes.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_core_scheduler.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_core_timezone_edge.py
chore: update backend tests
2026-06-16 12:01:03 +03:00
test_dashboards_api.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_datasets.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_db_executor.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_dependencies_unit.py
fix(rbac): close critical auth gaps — full RBAC audit remediation
2026-07-23 12:38:19 +03:00
test_deprecation_audit_fixes.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_gradio_proxy_config.py
security: fullstack hardening — task ownership, mapping validation, API-key scoping, test fixes
2026-07-15 23:02:23 +03:00
test_layout_utils.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_log_persistence.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_logger.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_logging_audit_fixes.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_maintenance_api.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_maintenance_service.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_auth_llm.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_clean_release_ext.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_dashboard.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_edge.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_filter_state.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_git.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models_translate.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_models.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_orchestrator_direct_db.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_resource_hubs.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_scheduler_ensure_aware.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_schemas_edge.py
chore: update backend tests
2026-06-16 12:01:03 +03:00
test_security_audit_fixes.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_security_orthogonal.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_smoke_app.py
feat(agent-centric-logging): consolidate CoT infra in shared, close REASON→REFLECT chains
2026-07-12 19:30:57 +03:00
test_smoke_migration_chain.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_smoke_plugins.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_sql_table_extractor_coverage.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_sql_table_extractor.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_storage_audit_fixes.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_storage_config.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_task_manager.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_task_persistence.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_corrections.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_executor_filter.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_history.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_jobs.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_scheduler_audit.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_scheduler_execution.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_scheduler_guard.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00
test_translate_scheduler.py
chore: migrate GRACE-Poly anchors to hierarchical dotted naming
2026-07-22 11:48:15 +03:00