adminandClaude Sonnet 4.6 782a9687e2 fix: allow admin role to submit triage and investigation API routes ...

API routes were hse-only, blocking admin from saving triage/investigation
forms even after the page-level guards were fixed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CPf5Rc8QPx6V8KLEEgfKEQ

2026-07-13 10:04:32 +08:00

..

addenda

fix: P1 API security hardening — rate limits, auth guards, duplicate prevention

2026-07-12 20:47:32 +08:00

ai

feat: switch AI provider from Anthropic to DeepSeek

2026-07-12 21:51:15 +08:00

close

feat: Phase 5 & 6 — usability, compliance hardening, analytics

2026-07-12 10:25:08 +08:00

investigation

fix: allow admin role to submit triage and investigation API routes

2026-07-13 10:04:32 +08:00

jkkp-pdf

feat: JKKP 6/7 PDF generation via pdf-lib, download from incident detail

2026-07-11 15:24:18 +08:00

similar

feat: switch embeddings from Voyage AI to Google Gemini text-embedding-004

2026-07-13 06:50:35 +08:00

triage

fix: allow admin role to submit triage and investigation API routes

2026-07-13 10:04:32 +08:00

route.ts

security: P0 fixes — IDOR on incident/CAPA, CAPA non-owner write, timing-safe recheck cron, auth callback open redirect

2026-07-12 20:36:28 +08:00