Kitos
a4a2adccee
Some checks failed
Aegis CI / lint-and-test (push) Has been cancelled
- Add must_change_password field to User model with migration b023 - Add POST /auth/change-password endpoint with password policy validation - Add require_password_changed dependency to block requests until password is changed - Add ChangePasswordModal with live password policy checklist (forced on first login) - Show password policy in CreateUserModal and EditUserModal - Fix backend permissions: tests, campaigns, templates, reports, evidence, worklogs - red_tech/blue_tech: execute only, cannot create tests/campaigns/templates - red_lead/blue_lead: create/edit tests/campaigns/templates, generate reports, no system access - viewer: read-only everywhere, can generate reports - Fix frontend role checks across TestDetailPage, TestDetailHeader, TeamTabs, TestsPage, CampaignsPage, CampaignDetailPage, Sidebar
31 lines
635 B
Python
31 lines
635 B
Python
"""add_must_change_password
|
|
|
|
Revision ID: b023mustchgpwd
|
|
Revises: b022osintitems
|
|
Create Date: 2026-02-17 23:00:00.000000
|
|
|
|
Add must_change_password column to users table to force password
|
|
change on first login.
|
|
"""
|
|
|
|
from alembic import op
|
|
|
|
revision = "b023mustchgpwd"
|
|
down_revision = "b022osintitems"
|
|
branch_labels = None
|
|
depends_on = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.execute("""
|
|
ALTER TABLE users
|
|
ADD COLUMN IF NOT EXISTS must_change_password BOOLEAN DEFAULT true;
|
|
""")
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.execute("""
|
|
ALTER TABLE users
|
|
DROP COLUMN IF EXISTS must_change_password;
|
|
""")
|