knacky 48a1c756bf feat(backend): add USER_MANAGE permission + delta migration (D-015) ...

Adds `Permission.USER_MANAGE = "user.manage"` to the F11 matrix. rt_lead
already holds ALL_PERMISSIONS so GROUP_PERMISSIONS is unchanged — rt_lead
gets the new permission automatically, rt_operator and soc_analyst get 403.

Alembic migration `202605230001_add_user_manage_permission`:
- inserts the `user.manage` row into `permission`,
- inserts the `(rt_lead, user.manage)` link into `group_permission`,
- exposes `_DELTA_PERMISSIONS` / `_DELTA_GROUP_PERMISSIONS` for parity tests.

The previous `test_frozen_*_matches_runtime` invariant (MA3) is generalised
to "runtime = initial frozen ∪ deltas of every migration in `_DELTAS`". New
migrations register themselves there without editing the historical one.

Verbatim wording from spec-analyst is recorded as D-015 in
`tasks/spec-decisions.md` (separate commit).

2026-05-23 15:52:47 +02:00

..

__init__.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_audit_hash.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_auth_schemas.py

test(backend): cover auth schemas + login/engagement E2E

2026-05-23 04:21:55 +02:00

test_connector_factory.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_migration_seed.py

feat(backend): add USER_MANAGE permission + delta migration (D-015)

2026-05-23 15:52:47 +02:00

test_password.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_rbac_matrix.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_soc_token.py

test(backend): add pytest baseline (B0.8)

2026-05-21 20:36:03 +02:00

test_storage_blob.py

fix(backend): stream store_blob and enforce max_bytes mid-write (MA2)

2026-05-22 05:24:25 +02:00

test_templating.py

fix(backend): make google-re2 a hard dependency, drop re fallback (B1)

2026-05-22 05:23:47 +02:00