Juan DenisandClaude Opus 4.8 6f70eb9ad1 feat(workspaces): make python.py grant-aware — every app blueprint now covered (#33) ...

Re-reading python.py showed every mutating endpoint is independently
@admin_required (runs before the shared get_app_or_404 gate), so that gate only
governs the 4 read GETs (packages/env/status/gunicorn-config). Pointing it at
can_access_app safely opens those to grantees while the admin-only mutations stay
untouched — no per-method split needed.

With this, every app-related blueprint is grant-aware. Also fixes the int-vs-str
identity comparison in the helper.

Verified: a python read-gate test (stranger 403, grantee passes), full suite
132 passed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-05 23:08:44 -04:00

..

conftest.py

Auth key usage, sudo user option, test path fix

2026-03-04 03:20:23 -05:00

test_agent_poll_ratelimit.py

fix(agent): rate-limit the poll /connect auth path

2026-05-31 14:46:47 -04:00

test_agent_registry_security.py

fix(agent): fail-closed agent registration + surface stuck-command errors

2026-05-31 16:08:13 -04:00

test_ai_assistant.py

feat(ai): add core AI assistant primitive powered by Prompture

2026-06-01 02:39:05 -04:00

test_audit_log.py

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

test_connection_string.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_pairing_pop.py

fix(pairing): verify Ed25519 proof-of-possession on pairing poll

2026-05-31 16:08:32 -04:00

test_repository_manifest_service.py

Add repository manifest detection and templates

2026-05-03 07:07:57 -04:00

test_resource_grants.py

feat(workspaces): make python.py grant-aware — every app blueprint now covered (#33)

2026-06-05 23:08:44 -04:00

test_server_permissions.py

Remote Docker remove, normalize API & permissions

2026-04-29 00:11:46 -04:00

test_servers_api_pairing.py

Introduce sk1 connection string format and GUI plugin

2026-05-05 14:03:31 -04:00

test_utils_system_integration.py

Move EXPECTED_MANAGER check into pytest test

2026-02-10 16:03:19 -05:00

test_utils_system.py

Silence Bandit and mock sudo/posix in tests

2026-03-04 02:54:14 -05:00

test_workspace_scope.py

feat(workspaces): scope the WordPress sites hub to the active workspace (#33)

2026-06-01 11:15:15 -04:00

test_wp_reports.py

feat(wordpress): monthly client reports — persisted per-month rollups (#33)

2026-06-01 03:04:03 -04:00