kitos f590a00006 fix(permissions): hide non-actionable UI + fix viewer route access ...

1. /executive-dashboard: add 'viewer' to ProtectedRoute roles — sidebar
   showed the link to viewers but the route redirected them to /dashboard.
2. /comparison: same fix — viewer was in sidebar roles but not in route.
3. /techniques/review-queue: add ProtectedRoute (leads+admin) — the page
   had no route-level protection, any authenticated user could access it.
4. TechniqueDetailPage review banner: hide from users who can't act on it.
   Previously shown to everyone with a 'Leads only' badge; now only shown
   to canReview users (admin/red_lead/blue_lead). Non-leads don't need to
   see alerts about changes they cannot acknowledge.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-29 15:25:36 +02:00

..

public

fix: D3FEND ontology-based import, template management UX, and branding

2026-02-10 15:53:24 +01:00

src

fix(permissions): hide non-actionable UI + fix viewer route access

2026-05-29 15:25:36 +02:00

.dockerignore

fix: add .dockerignore files to exclude node_modules from build

2026-02-06 16:59:50 +01:00

.gitignore

feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)

2026-02-06 16:09:50 +01:00

Dockerfile

feat: add complete Docker setup for testing

2026-02-06 16:33:22 +01:00

index.html

fix: D3FEND ontology-based import, template management UX, and branding

2026-02-10 15:53:24 +01:00

nginx.conf

fix(qa): CSP hash, remove pencil icon, fetch full template on modal open

2026-05-19 12:53:02 +02:00

package-lock.json

fix: upgrade axios to 1.13.5 to resolve DoS vulnerability

2026-02-11 09:13:02 +01:00

package.json

fix(frontend): align react-markdown version to ^10.1.0 to match lock file

2026-05-29 08:40:22 +02:00

tsconfig.json

feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)

2026-02-06 16:09:50 +01:00

vite.config.ts

feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)

2026-02-06 16:09:50 +01:00