sergi/ragoon-ui
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

fix: platform-wide admin audit and dashboard visibility #10

Merged
acbonet merged 2 commits from acbonet/admin-audit-visibility into main 2026-10-14 15:38:00 +02:00 AGit
Conversation 0 Commits 2 Files changed 13 +388 -176
acbonet commented 2026-10-14 15:21:41 +02:00
Collaborator
Copy link

Admin audit metadata, traces, governance, export and dashboard now include all users/workspaces in this instance instead of inheriting the active chat workspace. Scope derives from server-authenticated is_admin; owners, teachers, students and coordinators remain forbidden. Actor-bound scope is ready for future personal views, which are not enabled. Preserve metadata/provenance privacy, verify independent workspace and unscoped chains, record denied access without weakening authorization, and show workspace context in audit tables. No RAG, HTML, video, ordinary document permissions or full-content access changes. Validation: 88 backend tests, 106 frontend tests, TypeScript/Vite build, targeted Ruff and diff checks passed. Docs: docs/AUDIT_GOVERNANCE.md. Separate from RAG PR 10's offline answer-verifier prototype. Review CI before merging.

Admin audit metadata, traces, governance, export and dashboard now include all users/workspaces in this instance instead of inheriting the active chat workspace. Scope derives from server-authenticated is_admin; owners, teachers, students and coordinators remain forbidden. Actor-bound scope is ready for future personal views, which are not enabled. Preserve metadata/provenance privacy, verify independent workspace and unscoped chains, record denied access without weakening authorization, and show workspace context in audit tables. No RAG, HTML, video, ordinary document permissions or full-content access changes. Validation: 88 backend tests, 106 frontend tests, TypeScript/Vite build, targeted Ruff and diff checks passed. Docs: docs/AUDIT_GOVERNANCE.md. Separate from RAG PR 10's offline answer-verifier prototype. Review CI before merging.
fix: make administrator audit and dashboard views platform-wide
Some checks failed
ragoon-ui-ci / validate (pull_request) Failing after 2m25s
Details
f826bb2ea7 
Derive read scope from the authenticated principal. Admin metadata spans all actors and workspaces; explicit workspace filtering remains available. Keep non-admin views forbidden and actor-bound scope ready for future personal views. Preserve content restrictions and per-workspace ledger integrity, record denied reads, remove chat-workspace coupling from administrative UI and add scope indexes. Validate 88 backend tests, 106 frontend tests, build and lint.
style: format administrator audit frontend
All checks were successful
ragoon-ui-ci / validate (pull_request) Successful in 4m11s
Details
dd6a5cf2de
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
sergi/ragoon-ui!10
No description provided.