cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

docs(security): map initial attachment billing and admin boundaries

Browse Source
This commit is contained in:
cesnimda
2026-11-02 22:05:36 +01:00
parent 1bbd1612a9
commit 0a17a33db7
2 changed files with 26 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/ENDPOINT_AUTH_MATRIX.csv
+9
View File
@@ -0,0 +1,9 @@
method,route,source,declared_auth,control_observed,sensitive_asset_or_effect,candidate_test_suite,audit_execution
GET,/api/attachments/{jobId:int},AttachmentsController.cs:87,local scheme,job query before attachment listing; filter audit pending,attachment metadata,AttachmentsControllerTests,NOT RUN
GET,/api/attachments/download/{id:int},AttachmentsController.cs:103,local scheme,owned helper and managed path checks,attachment bytes,AttachmentsControllerTests,NOT RUN
PATCH,/api/attachments/{id:int},AttachmentsController.cs:125,local scheme,owned helper; mutation review pending,metadata and AI-use flag,AttachmentsControllerTests,NOT RUN
GET,/api/billing/status,BillingController.cs:42,local scheme,method declares local authentication,entitlement status,BillingControllerTests,NOT RUN
POST,/api/billing/checkout,BillingController.cs:58,local scheme,method declares local authentication; provider mocked only,checkout session,BillingControllerTests,NOT RUN
POST,/api/billing/portal,BillingController.cs:104,local scheme,method declares local authentication; provider mocked only,billing portal,BillingControllerTests,NOT RUN
POST,/api/billing/webhook,BillingController.cs:132,AllowAnonymous,signature verification and size limit; full binding audit pending,subscription entitlement,BillingControllerTests,NOT RUN
PUT,/api/users/{id}/roles,UsersController.cs:142,Admin role at class,privilege transition review pending,account roles,UsersControllerTests,NOT RUN
1 method route source declared_auth control_observed sensitive_asset_or_effect candidate_test_suite audit_execution
2 GET /api/attachments/{jobId:int} AttachmentsController.cs:87 local scheme job query before attachment listing; filter audit pending attachment metadata AttachmentsControllerTests NOT RUN
3 GET /api/attachments/download/{id:int} AttachmentsController.cs:103 local scheme owned helper and managed path checks attachment bytes AttachmentsControllerTests NOT RUN
4 PATCH /api/attachments/{id:int} AttachmentsController.cs:125 local scheme owned helper; mutation review pending metadata and AI-use flag AttachmentsControllerTests NOT RUN
5 GET /api/billing/status BillingController.cs:42 local scheme method declares local authentication entitlement status BillingControllerTests NOT RUN
6 POST /api/billing/checkout BillingController.cs:58 local scheme method declares local authentication; provider mocked only checkout session BillingControllerTests NOT RUN
7 POST /api/billing/portal BillingController.cs:104 local scheme method declares local authentication; provider mocked only billing portal BillingControllerTests NOT RUN
8 POST /api/billing/webhook BillingController.cs:132 AllowAnonymous signature verification and size limit; full binding audit pending subscription entitlement BillingControllerTests NOT RUN
9 PUT /api/users/{id}/roles UsersController.cs:142 Admin role at class privilege transition review pending account roles UsersControllerTests NOT RUN