feat(blueprint): scope summary reads to planning audience

2026-03-30 10:55:28 +02:00
parent 9b764008c3
commit 81a46c81bd
5 changed files with 65 additions and 2 deletions
@@ -135,6 +135,19 @@ Reasoning:
 - management-level groups carry chargeability targets and resource-linked counts that feed planning and reporting workflows, so they should not stay on broad authenticated reads
 - the list is consumed by resource editing, reporting filters, and admin configuration, which all fit the explicit planning audience better than generic `protectedProcedure`

+### `packages/api/src/router/blueprint.ts`
+
+- `listSummaries`: `planning-read`
+- `resolveByIdentifier`: `authenticated-safe-lookup`
+- remaining reads stay unchanged in this rollout
+- create, update, delete, global-flag writes: `admin-only`
+
+Reasoning:
+
+- `listSummaries` exposes `_count.projects`, so the assistant-facing summary list should not remain a broad authenticated read
+- `resolveByIdentifier` already returns a narrow lookup shape suitable for low-risk name/id resolution
+- broader blueprint read routes still support existing UI flows and need a separate follow-up slice before they can be tightened safely
+
 ### `packages/api/src/router/holiday-calendar.ts`

 - `listCalendars`, `listCalendarsDetail`, `getCalendarByIdentifier`, `getCalendarByIdentifierDetail`, `getCalendarById`: `admin-only`