naeel 9a331eec82 feat: full IAM impersonation support — read-only + original user + canWrite ...

- src/auth.js: all impersonation fields + permissions.can_write
- src/routes/oidc.js: save all fields to session
- ui/index.js: canWrite, originalUserEmail in req.user
- ui/routes/entries.js: read-only guard on POST/PATCH/DELETE
- docs/PLAN-impersonation.md: updated with implemented items

2026-06-11 15:54:56 +04:00

..

admin.js

feat: adminMode — чек-бокс переключения админского интерфейса

2026-06-11 11:08:03 +04:00

auth.js

fix: toggle as pure HTML form — no JS, no fetch, just POST+redirect

2026-06-11 14:59:59 +04:00

entries.js

feat: full IAM impersonation support — read-only + original user + canWrite

2026-06-11 15:54:56 +04:00

export.js

fix: DeepSeek audit — header injection + IAM limit + bump 0.5.22

2026-06-04 15:48:16 +03:00