maziggy 168d9d8f8e fix(auth): let API keys manage projects via new can_manage_projects scope (#1893) ...

PROJECTS_CREATE/UPDATE/DELETE were in _APIKEY_DENIED_PERMISSIONS with no
entry in _APIKEY_SCOPE_BY_PERMISSION, so every project mutation returned a
generic 403 for any API key regardless of granted permissions -- the same
regression class as archives (#1888) and library (#1832).

Add a per-key can_manage_projects scope. Project routes gate on plain
PROJECTS_* (no OWN/ALL split), so all three CRUD permissions map to the one
scope; membership edits (add-archives) gate on PROJECTS_UPDATE and are
covered. PROJECTS_READ is unchanged (already under can_read_status).

Column defaults TRUE for new keys; existing rows backfill to FALSE so the
upgrade never silently widens scope. Migration is BOOLEAN (SQLite + Postgres
safe), verified on fresh SQLite and Postgres 17. Bundled SpoolBuddy kiosk key
set to False. Settings API-key UI gets a Manage Projects toggle + Projects
badge; 11-locale i18n. RBAC scope matrix + drift guards extended.

2026-07-05 09:58:16 +02:00

..

__init__.py

feat(slicer): Pipelines — archive entry point + slicer progress toast (#1425 PR B follow-up)

2026-06-27 15:01:14 +02:00

active_print_spoolman.py

feat(spoolman): remain%-delta fallback for no-3MF "Untitled" prints (#1820)

2026-06-25 10:46:57 +02:00

ams_history.py

…

ams_label.py

Feature AMS Info Card (#570)

2026-03-05 08:36:39 +01:00

api_key.py

fix(auth): let API keys manage projects via new can_manage_projects scope (#1893)

2026-07-05 09:58:16 +02:00

archive.py

fix(photo): source finish photo from forced timelapse + cleanup (#1397)

2026-06-05 13:53:26 +02:00

auth_ephemeral.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

bug_report.py

Add in-app bug reporting with relay, debug log collection, and privacy controls

2026-03-04 13:33:19 +01:00

color_catalog.py

feat(inventory): multi-colour gradients, transparency, visual effects (#1154)

2026-04-29 09:13:33 +02:00

external_link.py

…

filament_sku_settings.py

[Fix] Forecasting: Group spools by color and rework UI (#1814)

2026-06-25 11:35:57 +02:00

filament.py

…

github_backup.py

feat(backup): Extend Backup to other Git providers (#1160)

2026-05-03 08:12:36 +02:00

group.py

…

kprofile_note.py

…

library.py

feat(file-manager): user-authored tags for cross-cutting filtering (#1268)

2026-06-22 12:27:58 +02:00

local_preset.py

…

location.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

long_lived_token.py

feat(#1108): long-lived camera-stream tokens + fix(#1089) audit-pass tweaks

2026-04-25 10:44:37 +02:00

maintenance.py

…

notification_template.py

feat(notifications): template-driven finish-photo email embed + user_print_* rename (#1792)

2026-06-22 11:15:39 +02:00

notification.py

feat(notifications): dedicate AI Failure Detection notification event (#1794)

2026-06-22 08:15:29 +02:00

oidc_provider.py

feat(auth): SSO autologin + disable local username/password login (#1589)

2026-06-25 14:54:27 +02:00

orca_base_cache.py

…

pending_upload.py

fix(archive,vp): strip .gcode.3mf properly + sync review/archive name (#1152)

2026-05-01 12:34:56 +02:00

pipeline_run.py

feat(slicer): Pipelines — multi-copy + class targeting + fanout + runs dashboard + retry-failed + WS updates (#1425 PR C — completes the v3 design)

2026-06-27 16:52:05 +02:00

print_batch.py

Add batch print quantity to print/schedule dialog (#342)

2026-04-01 11:55:30 +02:00

print_log.py

fix(stats): per-event aggregation so reprints add to Quick Stats instead of overwriting (#1378)

2026-05-16 11:34:40 +02:00

print_queue.py

feat(scheduler): preheat & heat-soak before queued prints with per-filament chamber targets + airduct flap control (#1468)

2026-06-29 12:35:43 +02:00

printer_sensor_history.py

feat(heater-history): track nozzle / bed / chamber readings + per-tile chart-icon overlay opens history modal

2026-06-20 12:55:24 +02:00

printer.py

feat(heater-history): track nozzle / bed / chamber readings + per-tile chart-icon overlay opens history modal

2026-06-20 12:55:24 +02:00

project_bom.py

…

project.py

feat(projects): URL field + cover photo on project cards (#1155)

2026-04-29 07:42:09 +02:00

settings.py

…

shopping_list.py

[Fix] Forecasting: Group spools by color and rework UI (#1814)

2026-06-25 11:35:57 +02:00

slicer_pipeline.py

feat(slicer): Slicer Pipelines — save & reuse a preset bundle in one click (#1425 PR A)

2026-06-27 13:56:18 +02:00

slot_preset.py

…

smart_plug_energy_snapshot.py

fix(energy): date-range energy in total mode + restart-resilient per-print tracking (#941)

2026-04-11 11:14:54 +02:00

smart_plug.py

feat(smart-plugs): auto-off after AMS drying completes (#1349)

2026-05-17 12:26:42 +02:00

sponsor_toast_state.py

feat(sponsor-prompt): in-app toast at earned milestones

2026-06-20 15:50:58 +02:00

spool_assignment.py

…

spool_catalog.py

…

spool_k_profile.py

…

spool_usage_history.py

Add archive_id to SpoolUsageHistory model and update cost calculations in usage_tracker

2026-02-20 13:39:41 +01:00

spool.py

feat(inventory): structured storage locations catalog (#1505)

2026-06-17 11:33:23 +02:00

spoolbuddy_device.py

fix(spoolbuddy): lower /update permission to INVENTORY_UPDATE so kiosk's own Settings -> Update button works

2026-05-08 14:28:41 +02:00

spoolman_k_profile.py

Feature/spoolman inventory UI (#1241)

2026-05-08 11:52:42 +02:00

spoolman_slot_assignment.py

fix(spoolman): allow AMS-HT ams_id range in slot-assignment table (#1274)

2026-05-12 08:48:30 +02:00

user_email_pref.py

Post work PR #693

2026-03-17 12:24:36 +01:00

user_otp_code.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

user_totp.py

feat: Two-Factor Authentication (TOTP, Email OTP) and OIDC/SSO – full implementation with admin UI (#933)

2026-04-13 13:24:28 +02:00

user.py

feat(orca-cloud): integrate Orca Cloud profile sync across UI, slicer and SpoolBuddy

2026-06-04 15:50:44 +02:00

virtual_printer.py

feat(gcode-injection): per-VP opt-in auto-print injection toggle (#1516) (#1656)

2026-06-19 11:29:07 +02:00