feat(ip): protect persona 'formula' — secret fields only super_admin sees/edits

Browse Source

IP protection so casual copying yields inferior results:
- SECRET_PERSONA_FIELDS (pains/objections/negotiation_levers/opener/tolerance +
  pain rootCause/resolutionConditions): only super_admin can view/edit them.
- list_personas/get_persona/update_persona/get_group strip these for role=admin (and
  hide sales_kit + pain-fit report from admins too).
- update_persona rejects admin attempts to set secret fields (403).
- PersonaForm hides the 'การขาย' recipe section for non-super-admin (shows locked note);
  auth.isSuperAdmin getter added.
Rebuilt dist. Added test_ip_protection.

...

This commit is contained in:

Macky

2026-08-09 07:22:50 +07:00

parent a04bc2add8

commit e1d61e1e1e

29 changed files with 156 additions and 39 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

82

frontend/dist/assets/index-BCax2GDh.js vendored Normal file

File diff suppressed because one or more lines are too long