Merge pull request #5 from Paca-AI/feature/enhance-backend-routes

feat: enhance backend routes with permission checks for checklist ope…

Author: pikann

plugin.json

@@ -2,18 +2,102 @@
   "id": "com.paca.checklist",
   "displayName": "Checklist",
   "description": "Adds named checklists with checkable items to tasks.",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "permissions": ["db.read", "db.write", "events.subscribe"],
   "backend": {
     "eventSubscriptions": ["task.deleted"],
     "routes": [
-      { "method": "GET",    "path": "/tasks/:taskId/checklists" },
-      { "method": "POST",   "path": "/tasks/:taskId/checklists" },
-      { "method": "PATCH",  "path": "/tasks/:taskId/checklists/:checklistId" },
-      { "method": "DELETE", "path": "/tasks/:taskId/checklists/:checklistId" },
-      { "method": "POST",   "path": "/tasks/:taskId/checklists/:checklistId/items" },
-      { "method": "PATCH",  "path": "/tasks/:taskId/checklists/:checklistId/items/:itemId" },
-      { "method": "DELETE", "path": "/tasks/:taskId/checklists/:checklistId/items/:itemId" }
+      {
+        "method": "GET",
+        "path": "/tasks/:taskId/checklists",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.read"]
+          }
+        ]
+      },
+      {
+        "method": "POST",
+        "path": "/tasks/:taskId/checklists",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.write"]
+          }
+        ]
+      },
+      {
+        "method": "PATCH",
+        "path": "/tasks/:taskId/checklists/:checklistId",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.write"]
+          }
+        ]
+      },
+      {
+        "method": "DELETE",
+        "path": "/tasks/:taskId/checklists/:checklistId",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.write"]
+          }
+        ]
+      },
+      {
+        "method": "POST",
+        "path": "/tasks/:taskId/checklists/:checklistId/items",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.write"]
+          }
+        ]
+      },
+      {
+        "method": "PATCH",
+        "path": "/tasks/:taskId/checklists/:checklistId/items/:itemId",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.write"]
+          }
+        ]
+      },
+      {
+        "method": "DELETE",
+        "path": "/tasks/:taskId/checklists/:checklistId/items/:itemId",
+        "middlewares": [
+          { "name": "optionalAuthn" },
+          { "name": "requireFreshPassword" },
+          {
+            "name": "requirePermissions",
+            "scope": "project",
+            "permissions": ["tasks.write"]
+          }
+        ]
+      }
     ]
   },
   "frontend": {