MirvMon v0.6.9
v0.6.9 is a behavior-preserving authorization cleanup release.
What changed
- Added one
RolePolicyfor the canonicaluser,operator, andadminrole catalog. AdminMiddleware,OperatorMiddleware,AdminController,SystemController, andAuditControllernow consume the same policy instead of duplicating string comparisons.- User-role validation now uses that same catalog, so new role handling cannot drift independently from request authorization.
- Existing route permissions are unchanged: users remain read-only, operators keep operational actions, and admin-only credentials/users/system/DR operations remain admin-only.
Upgrade
No database migration or configuration change is required. Pull ghcr.io/mirivlad/mirvmon:0.6.9 and redeploy the existing Compose stack.