feat: harden SaaS authentication and authorization

2026-07-28 12:15:51 +08:00
parent f22f329d33
commit 5d2248efee
123 changed files with 9090 additions and 2822 deletions
--- a/Tiku.Api/Controllers/TaxonomyController.cs
+++ b/Tiku.Api/Controllers/TaxonomyController.cs
@@ -21,7 +21,7 @@ public sealed class TaxonomyController(
    }

    [HttpPost]
-    [Authorize(Policy = TikuPolicies.TenantAdmin)]
+    [Authorize(Policy = BackendPermissions.TenantContentManage)]
    public Task<TaxonomyNodeItem> Create(
        CreateTaxonomyNodeDto request,
        CancellationToken cancellationToken)