Jonathan Kirkwood
ae967494bd
The external fund_administrator role (relabeled Administrator) now signs
into the full admin interface, fenced to the funds and SPVs granted to
it via EntityAccess:
- Partners, capital accounts, documents (upload and delete), entity
edits, and eNAV imports for its own funds only; no fund creation,
valuation sign-off, audit log, or investor view.
- Scoped user management: sees and manages only investors tied to its
funds; creates investor accounts only; updates preserve grants on
funds outside its scope.
- New DELETE /api/users/{id} (in-app Delete user button) with the
cascade cleanup factored out of the CLI; Service Admin and self are
protected, and an Administrator can only delete an investor who
belongs solely to its funds.
- Internal fund_admin relabeled 'Staff (all funds)' and dropped from
the create picker to end the two-similar-names confusion.
- Version badge removed from the UI (sidebar and portal header); the
build version now logs to the browser console instead.
- deploy/.startos (signing key) added to .gitignore.
39 lines
459 B
Plaintext
39 lines
459 B
Plaintext
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|
|
.venv/
|
|
*.egg-info/
|
|
dist/
|
|
|
|
# Node
|
|
node_modules/
|
|
frontend/dist/
|
|
|
|
# Built frontend served by backend (produced by the deploy build)
|
|
backend/static/
|
|
|
|
# DB
|
|
*.db
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
|
|
# macOS
|
|
.DS_Store
|
|
|
|
# Packaged service artifacts
|
|
*.s9pk
|
|
|
|
# Deploy
|
|
deploy/node_modules/
|
|
deploy/javascript/
|
|
|
|
# Confidential fund-admin spreadsheets (never commit)
|
|
*.xlsx
|
|
*.xls
|
|
|
|
# start-cli signing key + local config (never commit)
|
|
deploy/.startos/
|