feat(authz): 重写权限模板分配与班级授权边界

Browse Source

拆分能力、分配范围和业务关系，固定管理员能力并收紧组织级写入口。
补齐内容、课表、设备会话和实时通道授权，兼容旧库分配及历史快照。
重写权限分配预览，按实际可操作范围展示维护入口，合并学生入口并独立学年升级页。
增加授权攻击矩阵及静态门禁，更新隔离回归与开发契约。

验证：授权矩阵 23 段通过，Node 24 下 Web 63/63，类型检查、lint 与文档严格构建通过。

...

This commit is contained in:

LoveChengke committed 2026-10-31 09:40:23 +08:00

1 parent 682818dd4a

commit 66be3a63b1

115 files changed

+4463 -2747

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/screenshots/plan-editor-list.png

BIN

Binary file not shown.

Side by Side Swipe Overlay Before Width:  |  Height:  |  Size: 107 KiB After Width:  |  Height:  |  Size: 73 KiB

docs/screenshots/plan-editor-live-api.png

BIN

Binary file not shown.

Side by Side Swipe Overlay Before Width:  |  Height:  |  Size: 107 KiB After Width:  |  Height:  |  Size: 108 KiB

docs/screenshots/plan-editor-shell.png

BIN

Binary file not shown.

Side by Side Swipe Overlay Before Width:  |  Height:  |  Size: 129 KiB After Width:  |  Height:  |  Size: 129 KiB

docs/screenshots/plan-editor-timeline.png

BIN

Binary file not shown.

Side by Side Swipe Overlay Before Width:  |  Height:  |  Size: 100 KiB After Width:  |  Height:  |  Size: 101 KiB