Tree: f3fba4a229

master

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'f3fba4a229'

${ noResults }

Commit Graph

2 Commits (f3fba4a2298c755a6552fb457ad16b769b02479f)

Author	SHA1	Message	Date
luoweijian	f3fba4a229	fix(dict): clear client-supplied audit fields in saveGroup/saveItem — prevent strictFill bypass forgery saveGroup/saveItem accepted entity params whose createTime/creatorId/updaterId were not sanitized; MetaObjectFillHandler uses strictInsertFill/strictUpdateFill which only fills null fields, so client-supplied audit values were retained. Now: null out all audit fields on entry (framework refills), restore createTime/creatorId from exist on edit.	1 month ago
luoweijian	3d55eeb196	feat(dict): data dictionary module — two-level flat model, CRUD/default/cache/permission/seed (ADR-0015) - 4 tables (dict_group/dict_item/dict_group_default/dict_ref_count), delete_key soft-delete reuse - DictGroup/DictItem full CRUD + force-delete + status toggle + enabled-list - DictReferenceService: increment/decrement/batchApply/isReferenced, same-tx ref_count, no cache - DictQueryService: Caffeine 10s cache + 2s negative cache for empty results, group.status join - Default item: INSERT ON DUPLICATE KEY UPDATE, hibernate on group disable, auto-restore - Permission seeds: 10 perm codes → sys_menu tree, bound to ROLE_ADMIN, no crm-auth import - Built-in dict initializer: idempotent upsert, builtin=false never touched (US-41), value not overwritten - 48 tests pass; full project compiles	1 month ago