 dadachann
|
5ba5e60002
|
fix(security): require authentication for image file endpoint (H-2)
- Changed /api/v1/files/image from AuthType.NONE to USER_TOKEN_OR_API_KEY
- Added Permission.RESOURCE_VIEW requirement
- Prevents unauthenticated cross-tenant file access via leaked keys
- Fixes HIGH severity finding from multi-tenant security review
docs: add comprehensive database migration guide
- Complete migration steps for OSS → multi-tenant
- Backup, execution, verification procedures
- Rollback scenarios and recovery plans
- Performance tuning recommendations
|
2026-07-30 04:31:49 +00:00 |
|
|
dadachann
|
4b2a628db6
|
fix(deps): pin green multi-tenant plugin SDK
|
2026-07-29 11:15:18 +00:00 |
|
|
Junyan Qin
|
610915b9c5
|
fix(runtime): bound tenant resource amplification
|
2026-07-29 18:27:44 +08:00 |
|
|
Junyan Qin
|
e8d90c4259
|
fix(cloud): bound tenant maintenance and monitoring work
|
2026-07-29 16:02:44 +08:00 |
|
|
Junyan Qin
|
c89e6f3bd2
|
fix(cloud): enforce instance capacity ceilings
|
2026-07-29 13:45:58 +08:00 |
|
|
Junyan Qin
|
e52d6880f5
|
fix(cloud): eliminate periodic runtime CPU spikes
|
2026-07-29 12:47:53 +08:00 |
|
|
Junyan Qin
|
aa342d9347
|
fix(cloud): bound runtime restart storms
|
2026-07-29 12:14:08 +08:00 |
|
|
Junyan Qin
|
ae85ac2b16
|
feat(cloud): harden multi-tenant runtime resources
|
2026-07-29 11:32:26 +08:00 |
|
|
Junyan Qin
|
5beab49577
|
docs(cloud): update control plane verification
|
2026-07-24 22:58:56 +08:00 |
|
|
Junyan Qin
|
98f45aa88e
|
feat(tenancy): connect cloud workspace control plane
|
2026-07-24 19:11:33 +08:00 |
|
|
Junyan Qin
|
d7cdd206c2
|
docs(tenancy): record final isolation verification
|
2026-07-24 16:22:45 +08:00 |
|
|
Junyan Qin
|
ac72563664
|
fix(tenancy): close isolation and permission gaps
|
2026-07-24 16:22:45 +08:00 |
|
|
Junyan Qin
|
64dc887b20
|
docs(tenancy): record final isolation verification
|
2026-07-24 16:22:45 +08:00 |
|
|
Junyan Qin
|
627eb6b8ef
|
feat(tenancy): harden shared cloud runtime boundaries
|
2026-07-24 16:22:45 +08:00 |
|
|
Junyan Qin
|
d7adbeec1e
|
docs: finalize cloud v2 multi-tenant decisions
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
abf77cecfa
|
docs(tenancy): refine architecture options
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
270622ae9d
|
docs(tenancy): revise single-instance SaaS topology
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
30f414a534
|
docs(tenancy): record verification evidence
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
8b7ce77cec
|
feat(tenancy): implement workspace isolation
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
37099ddf7e
|
docs: redesign multi-tenant workspace architecture
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
ee59e2d3fd
|
Add OSS and commercial workspace boundaries
|
2026-07-24 16:22:44 +08:00 |
|
|
Junyan Qin
|
a4550350c0
|
Document multi-tenant workspace architecture
|
2026-07-24 16:22:44 +08:00 |
|