Deploy AIOS web (React glide grid + FastAPI slice)
Browse files- RELEASES.json +1 -1
- VERSION +1 -1
- api/deps.py +13 -2
RELEASES.json
CHANGED
|
@@ -1,5 +1,5 @@
|
|
| 1 |
{
|
| 2 |
-
"current": "
|
| 3 |
"releases": [
|
| 4 |
{
|
| 5 |
"version": "v25",
|
|
|
|
| 1 |
{
|
| 2 |
+
"current": "7b711f1",
|
| 3 |
"releases": [
|
| 4 |
{
|
| 5 |
"version": "v25",
|
VERSION
CHANGED
|
@@ -1 +1 @@
|
|
| 1 |
-
|
|
|
|
| 1 |
+
7b711f1
|
api/deps.py
CHANGED
|
@@ -434,8 +434,19 @@ def assistant_source_status(session: Session, databases=None):
|
|
| 434 |
continue
|
| 435 |
if perm_scope.assistant_entry(session.user, key) is None:
|
| 436 |
row["visible"] = bool(perm_scope.may_access(session.user, key))
|
| 437 |
-
|
| 438 |
-
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 439 |
continue
|
| 440 |
row["permitted"] = True
|
| 441 |
# ⚠ A CACHE MISS IS A DATA-AVAILABILITY FACT, NOT A PERMISSION ONE, and it must not
|
|
|
|
| 434 |
continue
|
| 435 |
if perm_scope.assistant_entry(session.user, key) is None:
|
| 436 |
row["visible"] = bool(perm_scope.may_access(session.user, key))
|
| 437 |
+
# ⛔⛔ THIS SENTENCE DELIBERATELY PROMISES NO REMEDY, AND THAT IS A CORRECTION.
|
| 438 |
+
# Its first version said *"an administrator can re-save them"*. MEASURED on the
|
| 439 |
+
# deployed build the same hour: re-saving `leadership`'s permissions through
|
| 440 |
+
# `PUT /admin/users/{u}/perms` returned 200 with the block byte-identical and
|
| 441 |
+
# `perms_v` unchanged at 1 — and the source stayed refused. So the advice was
|
| 442 |
+
# wrong, and a refusal that hands the reader a fix which does not work is worse
|
| 443 |
+
# than one that admits it does not know: they spend the trip and land back here.
|
| 444 |
+
# ⚠ The cause is still open (D-276). `assistant_entry` reads only `entry`,
|
| 445 |
+
# `is_migrated` and `may_access`, and `product_data` carries the SAME grant as
|
| 446 |
+
# `customer_data` under one record — so the divergence is not visible in the perms
|
| 447 |
+
# document and guessing at it once already produced a wrong answer.
|
| 448 |
+
row["reason"] = ("the assistant cannot resolve a data grant for it yet — this is a "
|
| 449 |
+
"known gap (D-276), not something you have set wrongly")
|
| 450 |
continue
|
| 451 |
row["permitted"] = True
|
| 452 |
# ⚠ A CACHE MISS IS A DATA-AVAILABILITY FACT, NOT A PERMISSION ONE, and it must not
|