jramos a711972054 docs: update README for group-based access control, security hardening, and current architecture ...

- Replace role-based docs with group-based (Admin, Standard_User, Leadership, Read_Only)
- Update API reference with correct group requirements and new endpoints (JIRA tickets, archive, todo-queue)
- Remove hardcoded default credentials from installation instructions
- Document SESSION_SECRET as required with generation instructions
- Add new migrations to install sequence (archive, timestamps, counts history, user_groups, created_by)
- Update architecture tree with new files (ivantiArchive, ComplianceChartsPanel, etc.)
- Update security model with rate limiting, sandbox iframe, rehype-sanitize, Content-Disposition sanitization
- Update database schema docs with created_by columns, user_group triggers, cascade deletes
- Fix middleware reference from requireRole to requireGroup
- Remove stale admin123 references throughout

2026-04-07 11:29:33 -06:00

..

helpers

Remove weekly report functionality

2026-03-11 11:32:39 -06:00

middleware

feat: implement group-based access control (Admin, Standard_User, Leadership, Read_Only)

2026-04-06 16:18:07 -06:00

migrations

fix: address all 11 review items for group-based access control

2026-04-07 09:52:26 -06:00

routes

docs: update README for group-based access control, security hardening, and current architecture

2026-04-07 11:29:33 -06:00

scripts

feat(compliance): add AEO compliance tracking backend

2026-03-31 15:06:59 -06:00

.env.example

Add Ivanti Workflows panel with API key auth and SQLite cache

2026-03-10 15:29:33 -06:00

.gitignore

completed test plan - pass, modified setup.js

2026-01-29 03:47:15 +00:00

migrate_jira_tickets.js

Added JIRA ticket tracking feature

2026-02-09 11:56:34 -07:00

migrate_multivendor.js

added stop start files and testing multivendor support

2026-01-27 23:00:12 +00:00

migrate-audit-log.js

Audit logging feature files

2026-01-29 15:10:29 -07:00

migrate-to-1.1.js

Added database migration script

2026-01-29 11:07:49 -07:00

server.js

security: address audit findings C-4 through M-8

2026-04-07 10:23:10 -06:00

setup-env.sh

Add setup-env.sh script for environment configuration

2026-01-29 03:13:56 +00:00

setup.js

security: address audit findings C-4 through M-8

2026-04-07 10:23:10 -06:00