feat: enforce tenant isolation and shared question bank

2026-07-27 16:59:12 +08:00
parent 28e9a9fa41
commit db4c7b4496
137 changed files with 6402 additions and 112274 deletions
--- a/Tiku.Api/Controllers/SecurityDiagnosticsController.cs
+++ b/Tiku.Api/Controllers/SecurityDiagnosticsController.cs
@@ -9,7 +9,7 @@ namespace Tiku.Api.Controllers;
 [Route("api/_security")]
 public sealed class SecurityDiagnosticsController(
    ICurrentUser currentUser,
-    ICurrentTenant currentTenant) : ControllerBase
+    ITenantContext currentTenant) : ControllerBase
 {
    [Authorize(Policy = TikuPolicies.AuthenticatedUser)]
    [HttpGet("authenticated")]
@@ -29,7 +29,7 @@ public sealed class SecurityDiagnosticsController(
        return Ok(new
        {
            currentTenant.TenantId,
-            currentTenant.Role
+            currentUser.TenantRole
        });
    }

@@ -40,7 +40,7 @@ public sealed class SecurityDiagnosticsController(
        return Ok(new
        {
            currentTenant.TenantId,
-            currentTenant.Role
+            currentUser.TenantRole
        });
    }
 }