Repository navigation

Reject protected role assignments for API keys and querier RBAC - #67

Merged

VibeSWE merged 14 commits into

mainfrom

fix/apikey-role-escalation

Oct 25, 2026

Merged

Reject protected role assignments for API keys and querier RBAC#67
VibeSWE merged 14 commits into
mainfrom
fix/apikey-role-escalation

Commits on Oct 24, 2026
- Add failing tests for API key role escalation and querier role update
  
  VibeSWE
  and
  claude
  committed
  aefa8bc
- Add regressions for protected roles on querier endpoints
  
  VibeSWE
  and
  codex
  committed
  d5ffa91
- Isolate Internal role rejection from SuperAdmin in API key test
  
  VibeSWE
  and
  codex
  committed
  d041fa4
- Reject protected role assignments for API keys and querier users
  
  VibeSWE
  and
  codex
  committed
  71dffd5
- Validate querier role updates before mutating live state
  
  VibeSWE
  and
  codex
  committed
  e786097
- Make API key auth test roles independent of map initialization order
  
  VibeSWE
  and
  codex
  committed
  8fd7930
Commits on Oct 25, 2026
- Merge remote-tracking branch 'origin/main' into fix/apikey-role-escalation
  
  VibeSWE
  and
  claude
  committed
  9187a42
- Serialize querier and role handler tests that write the shared RBAC maps
  
  VibeSWE
  and
  claude
  committed
  36af50e
- test: reject updates to existing internal querier roles
  
  VibeSWE
  and
  codex
  committed
  f345973
- test: document querier role guard regression failures
  
  VibeSWE
  and
  codex
  committed
  7c7af59
- Add failing tests for protected user and role checks on querier and API keys
  
  VibeSWE
  and
  claude
  committed
  bf1056a
- Port standalone protected-user checks to querier user endpoints and API keys
  
  VibeSWE
  and
  claude
  committed
  ad4b09d
- test: cover unprotected holders and tenant scoping in any_role_held_by_protected_user
  
  VibeSWE
  and
  claude
  committed
  7c4630f
- Reject protected users in querier delete_user and remove_roles_from_user
  
  VibeSWE
  and
  claude
  committed
  8988e95

Commits

Commits on Oct 24, 2026

Commits on Oct 25, 2026