Milad 4a3c226518 feat(org): panel-based access system replacing roles (procurement/inventory) ...

- new tables user_panels (panel: procurement/inventory/pm + level full/limited)
  and user_project_members (M:N membership, separate from pm responsibility)
- UserContext carries panels + member_project_ids; /users/me and the users
  list include them
- admin endpoints: PUT /users/{id}/panels, PUT /users/{id}/panel-projects
- inventory scope: panel inventory 'full' -> manager scope (all projects, NO
  stock change); 'limited' -> supervisor scope (own memberships, stock change
  allowed); legacy roles kept as migration fallback; admin untouched
- procurement writes: _procurement_writer is now panel-aware (admin, legacy
  procurement_manager, or procurement 'full') across all 18 write routers;
  quote CREATE additionally allows 'limited' users restricted to their member
  projects (validated server-side)
- frontend: panel-aware HomeRoute (inventory -> warehouse panel, procurement
  limited -> minimal RequesterHome), wizard project options restricted for
  limited users, change-inventory button/route gated to inventory 'limited',
  organization panel gains the panels & access-levels management section

2026-09-29 13:37:59 +03:30

..

__init__.py

refactor(catalog): reduce the category taxonomy to a supplier label

2026-09-20 19:44:23 +00:00

attribute_definitions.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

auth.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

brand_materials.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

brands.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

files.py

feat(rbac): enforce procurement write restrictions and support supervisor role in SSO

2026-09-26 12:32:01 +03:30

inventory.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

item_decisions.py

feat(security): JWT required on every API route, gated dev fallback, role checks

2026-09-18 22:02:09 +03:30

item_receipts.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

item_termsheets.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

line_item_specs.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

line_items.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

material_categories.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

materials.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

pm.py

feat(inventory): limit supervisor access to own project inventory and remove rectangular change inventory icon

2026-09-27 18:42:05 +03:30

projects.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

quote_events.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

quotes.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

schedule_steps.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

standard_conversions.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

supplier_materials.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

suppliers.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

termsheets.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

units.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30

users.py

feat(org): panel-based access system replacing roles (procurement/inventory)

2026-09-29 13:37:59 +03:30