No description
Find a file
Alberto Martinez 0d660c4549 IAM clientes: roles por tenant, matriz CRUD y alcance
<!-- CURSOR_AGENT_PR_BODY_BEGIN -->
## Summary

Implements full client-side IAM: per-tenant custom roles, CRUD permission matrix, user/project/warehouse scope, and enforcement across API and web-panel.

## Key changes

- Auth with `role_id`, `is_owner`, status checks; API key without tenant_admin bypass
- IAM REST: users/roles CRUD, reset access, `/v1/me/permissions`, `/v1/me/scope`
- CRUD route gates + project/warehouse scope + project doc category filtering
- Rewritten `usuarios.vue` with ribbon, tree, matrix; dynamic menu via `usePermissions`
- Tests: `iam_test.ts` (9 passing); `deno check` and web-panel build green

Apply migrations `005-iam-v2-roles-crud.sql` and `031-project-doc-types-technical.sql` before deploy.
<!-- CURSOR_AGENT_PR_BODY_END -->

<div><a href="https://cursor.com/agents/bc-0da3751a-38ff-40ab-bba2-5df2322c8cda?cursor_ref=pr_footer&cursor_cta=open_in_web"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-web-light.png"><img alt="Open in Web" width="114" height="28" src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a href="https://cursor.com/background-agent?bcId=bc-0da3751a-38ff-40ab-bba2-5df2322c8cda&cursor_ref=pr_footer&cursor_cta=open_in_cursor"><picture><source media="(prefers-color-scheme: dark)" srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source media="(prefers-color-scheme: light)" srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img alt="Open in Cursor" width="131" height="28" src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</div>
2026-09-08 18:49:53 +00:00
.github/workflows api: --allow-sys para el SDK de AWS/R2 en Deno 2026-09-03 05:49:14 +00:00
api Implement client IAM v2: roles per tenant, CRUD matrix, scope, and panel UI 2026-09-08 18:16:59 +00:00
db Add IAM v2 roles/permissions migration and project doc types 2026-09-08 18:10:45 +00:00
docs api: ping R2 con ListObjects, no HeadBucket 2026-09-03 05:42:13 +00:00
overlays compose: unir migrate y api a la red coolify 2026-09-03 05:25:53 +00:00
scripts test: validar endpoints y RPCs de gastos, almacén e IAM 2026-09-04 04:17:47 +00:00
tmp/pdfs Nominas 2026-08-25 20:21:49 -05:00
web first commit 2026-08-21 16:55:01 -05:00
web-panel Implement client IAM v2: roles per tenant, CRUD matrix, scope, and panel UI 2026-09-08 18:16:59 +00:00
web-saas refactor(core): migrate core CRUD to PostgreSQL RPC + unified HTTP errors 2026-09-04 02:34:43 +00:00
.dockerignore first commit 2026-08-21 16:55:01 -05:00
.env.example api: compatibilidad S3 con Cloudflare R2 (reemplazo de Contabo) 2026-09-03 04:40:54 +00:00
.gitignore first commit 2026-08-21 16:55:01 -05:00
docker-compose.yml compose: unir migrate y api a la red coolify 2026-09-03 05:25:53 +00:00
Dockerfile.api api: --allow-sys para el SDK de AWS/R2 en Deno 2026-09-03 05:49:14 +00:00
Dockerfile.migrate deploy: Liquibase automático en cada deploy (job migrate) 2026-09-03 04:54:15 +00:00
Dockerfile.provision db/infra: ETL de datos, backups y limpieza de despliegue (fase 5-7) 2026-09-02 21:05:07 +00:00
Dockerfile.web-panel first commit 2026-08-21 16:55:01 -05:00
Dockerfile.web-saas first commit 2026-08-21 16:55:01 -05:00
package.json ops: sacar el overlay local del glob docker-compose*.yml 2026-09-03 05:19:10 +00:00