4 Commits

Author SHA1 Message Date
f74f8aed8d fix: restore shell_theme.css/js permissions in load_path.py (ahserver still requires RBAC check for auto-served static files) 2026-05-26 08:40:08 +08:00
0f470fca61 fix: remove manual css/js references from shell.ui and load_path.py
- Remove Html widget in shell.ui that manually loaded shell_theme.css/js
  (ahserver auto-serves wwwroot js/css files)
- Remove shell_theme.css/js from load_path.py permission list
  (ahserver handles static resources automatically)
2026-05-26 07:36:52 +08:00
f2b2e5d6e7 fix: set shell_theme.css/js to 'any' role (static resources need public access) 2026-05-25 22:32:06 +08:00
fd8443f445 feat: add scripts/load_path.py for RBAC permission initialization
- Add scripts/load_path.py with all 28 wwwroot paths
- menu.ui set to 'any' role (public nav access)
- All other paths set to 'logined' role (dashboard visible to authenticated users)
- Idempotent: skips already-registered paths
2026-05-25 22:24:48 +08:00