Jonathan Kirkwood
858bbe10da
New external role administrator_viewer: signs into the admin interface and reads everything for its granted funds and SPVs (overview, partners, capital accounts with every investor's statements, documents, valuation history) but every write is refused: no imports, uploads, deletions, entity edits, exit marking, or account management. No migration needed; roles are stored as strings. Internal admins can flip an Administrator between full management and view only via a new Access level dropdown in Users > Manage. The user-list endpoint is read-widened for the viewer role so investor names resolve on its screens; all mutating endpoints keep the stricter gate.
18 lines
412 B
JSON
18 lines
412 B
JSON
{
|
|
"name": "ten31portal-startos",
|
|
"version": "0.2.45",
|
|
"private": true,
|
|
"scripts": {
|
|
"build": "npm run check && rm -rf ./javascript && ncc build startos/index.ts -o ./javascript",
|
|
"check": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@start9labs/start-sdk": "^0.4.0-beta.58"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^22.19.0",
|
|
"@vercel/ncc": "^0.38.4",
|
|
"typescript": "^5.9.3"
|
|
}
|
|
}
|