This repository was archived by the owner on Aug 8, 2026. It is now read-only.

Use a database layer that does access control checks - #476

Draft

mtlynch wants to merge 10 commits into

spike/access-service-layer

Commits on Feb 6, 2026

Extract read-then-authorize boilerplate into helper methods

mtlynch
and
exedev-shelley
committed
3e92740
Refactor write-path auth to operation helpers with owner-or-admin policy
mtlynch
committed
be42eaa
Merge branch 'master' into improve/extract-auth-boilerplate
mtlynch
committed
cf979e4
Split read helpers from HTTP writes using typed errors
mtlynch
committed
ca11e73
Introduce request-scoped access service between handlers and store
mtlynch
committed
befbbe3
Enforce access-control path via restricted Store and AccessStore
mtlynch
committed
3f7c7ac
Use one Store interface with access-controlled getDB wrapper
mtlynch
committed
939279b
Store only wrapped DB provider in Server and trim handler Store
mtlynch
committed
dc42a24
work in progress
mtlynch
committed
46e8687

Commits on Feb 16, 2026

Don't keep db var
mtlynch
committed
b992858