fix: add server-side RBAC to unprotected write/delete endpoints#11

Merged

wicky-zipstack merged 8 commits into

mainfrom

fix/vapt-add-handle-permission-to-write-endpoints

Apr 2, 2026

Commits on Mar 27, 2026

fix: add server-side RBAC to unprotected write/delete endpoints (VAPT #1)

abhizipstack
and
claude
committed

Commits on Apr 1, 2026

fix: address review comments — deduplicate URL prefix, preserve response status codes

abhizipstack
and
claude
committed
fix: revert generate_formula param back to model_name

abhizipstack
and
claude
committed
fix: move @clear_cache below @handle_permission to avoid cache invalidation on 403

abhizipstack
and
claude
committed