Skip to content

chore(release): staging to production - 2026.03.14 - #1016

Merged
maxtechera merged 2 commits into
productionfrom
staging
Mar 14, 2026
Merged

chore(release): staging to production - 2026.03.14#1016
maxtechera merged 2 commits into
productionfrom
staging

Conversation

@github-actions

Copy link
Copy Markdown

🚀 Release: Staging to Production

Release Date: 2026-03-14

Changes in this release

  • fix: populate permissions and features for API key users (721704b)

This PR is automatically created/updated when commits are pushed to staging.
Merging this PR will trigger the release workflow to create a new GitHub release.

maxtechera and others added 2 commits March 13, 2026 22:24
API key authenticated users were missing `permissions` and `features` on
`req.user`, causing `checkPermission` / `checkAnyPermission` RBAC middleware
to return 403 Forbidden for every protected route. JWT users already had
these fields populated via `verifyAAIToken`.

Now the API key auth path mirrors the JWT flow: org admins get owner-role
permissions + all feature flags, regular users get their workspace role
permissions.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
fix: populate permissions and features for API key users
@vercel

vercel Bot commented Mar 14, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
answerai-docs Building Building Preview Mar 14, 2026 1:25am
the-answerai Building Building Preview Mar 14, 2026 1:25am

Request Review

@maxtechera
maxtechera merged commit d7cbcac into production Mar 14, 2026
8 checks passed
@maxtechera
maxtechera temporarily deployed to staging - aai-unified2-flowise-moonstruck March 14, 2026 01:26 — with Render Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant