mirror of
https://github.com/itflow-org/itflow
synced 2026-07-27 02:37:15 +00:00
Add user-based RBAC for API keys
API keys now run as a user and inherit that user's module, operation, and client permissions. Drops per-key client scoping and removes existing keys (must be recreated). Adds an edit modal to change a key's user.
This commit is contained in:
4
db.sql
4
db.sql
@@ -91,7 +91,7 @@ CREATE TABLE `api_keys` (
|
||||
`api_key_decrypt_hash` varchar(200) NOT NULL,
|
||||
`api_key_created_at` datetime NOT NULL DEFAULT current_timestamp(),
|
||||
`api_key_expire` date NOT NULL,
|
||||
`api_key_client_id` int(11) NOT NULL DEFAULT 0,
|
||||
`api_key_user_id` int(11) NOT NULL DEFAULT 0,
|
||||
PRIMARY KEY (`api_key_id`)
|
||||
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_general_ci;
|
||||
/*!40101 SET character_set_client = @saved_cs_client */;
|
||||
@@ -2996,4 +2996,4 @@ CREATE TABLE `vendors` (
|
||||
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
|
||||
/*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;
|
||||
|
||||
-- Dump completed on 2026-07-25 13:20:49
|
||||
-- Dump completed on 2026-07-25 16:50:10
|
||||
|
||||
Reference in New Issue
Block a user