11 Commits

Author	SHA1	Message	Date
ryan	7b379863b4	fix(upload): restrict cross-user private file access (UPLOAD-1) ... - Add access_mode column to w_uploads table (0 = private, 1 = public) and initialize data in a single migration script - Enforce strict ownership check for private files during download - Allow public files to follow whitelisted public-access rules - Default access_mode to public for avatars and private for generic uploads - Update frontend service to support optional accessMode parameter	2026-06-13 10:13:41 +08:00
ryan	c916f566d9	系统控制台完成更新	2026-06-12 14:12:03 +08:00
ryan	1fe5118029	登录状态记录	2026-06-12 10:15:29 +08:00
ryan	0221d4de14	缓存框架	2026-06-11 15:12:09 +08:00
ryan	5e0de01c4b	文件管理权限控制	2026-06-11 14:09:32 +08:00
ryan	312bc7d4d5	框架表改名 w_{name}	2026-06-11 09:27:15 +08:00
ryan	786fe71778	优化定时任务	2026-06-11 09:20:28 +08:00
ryan	616242fad8	去除 access_token 访问写库逻辑	2026-06-11 09:09:17 +08:00
ryan	983228227e	AccessToken 默认非管理员权限	2026-06-10 22:50:44 +08:00
ryan	db163034c0	优化任务管理	2026-06-10 19:36:35 +08:00
ryan	6b3c0217f0	goose 迁移	2026-06-09 16:47:49 +08:00