INSIGHT-MVP/packages/crm-service/src/auth/guards
Thomas Reitz de4af77c5c feat: CRM Berechtigungsmodell — konfigurierbares Sichtbarkeitsmodell (OWN/TEAM/ALL)
Implementiert pro-Entity Sichtbarkeitssteuerung für Companies, Contacts, Deals
und Activities mit Rollen-basierter Zugriffskontrolle (ADMIN sieht alles,
TEAM_LEAD mindestens Team-Sicht, READONLY nur Lesezugriff).

- JWT Payload um tenantRole + department erweitert (Core + CRM)
- Team-Members-Endpoint im Core Service (GET /users/team-members)
- VisibilityModule mit Redis-Cache (CRM Service)
- ReadonlyGuard als globaler Guard (CRM Service)
- buildVisibilityFilter Utility für Prisma WHERE-Filterung
- Admin-Einstellungsseite /admin/crm-settings (Frontend)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-14 22:20:53 +01:00
..
jwt-auth.guard.ts feat(crm): scaffold CRM service with full CRUD modules 2026-03-10 15:54:13 +01:00
readonly.guard.ts feat: CRM Berechtigungsmodell — konfigurierbares Sichtbarkeitsmodell (OWN/TEAM/ALL) 2026-03-14 22:20:53 +01:00
roles.guard.ts feat(crm): scaffold CRM service with full CRUD modules 2026-03-10 15:54:13 +01:00
tenant.guard.ts fix(crm): fix Lexware import 500 — tenantId validation in TenantGuard and service 2026-03-11 10:34:46 +01:00