3 Commits

Author	SHA1	Message	Date
pkupuk	7fd73e0e3d	Implement Sprint 1 stories: collections, RBAC, audit logging, load testing ... Complete 6 Sprint 1 stories for Epic 1 web migration infrastructure. Portfolio Collection: - Add 7 fields: title, slug, url, image, description, websiteType, tags - Configure R2 storage and authenticated access control Categories Collection: - Add nameEn, order, textColor, backgroundColor fields - Add color picker UI configuration Posts Collection: - Add excerpt with 200 char limit and ogImage for social sharing - Add showInFooter checkbox and status select (draft/review/published) Role-Based Access Control: - Add role field to Users collection (admin/editor) - Create adminOnly and authenticated access functions - Apply access rules to Portfolio, Categories, Posts, Users collections Audit Logging System (NFR9): - Create Audit collection with timestamps for 90-day retention - Add auditLogger utility for login/logout/content change tracking - Add auditChange and auditGlobalChange hooks to all collections and globals - Add cleanupAuditLogs job with 90-day retention policy Load Testing Framework (NFR4): - Add k6 load testing with 3 scripts: public-browsing, admin-operations, api-performance - Configure targets: p95 < 500ms, error rate < 1%, 100 concurrent users - Add verification script and comprehensive documentation Other Changes: - Remove unused Form blocks - Add Header/Footer audit hooks - Regenerate Payload TypeScript types	2026-01-31 17:20:35 +08:00
pkupuk	d0e8c3bcff	Add role-based access control with admin/editor roles ... Create adminOnly and adminOrEditor access functions. Add role field to Users collection (admin/editor, default: editor). Update access control across all collections and globals to enforce role-based permissions.	2026-01-31 13:03:16 +08:00
pkupuk	2d3d144a66	Add Portfolio collection with 7 fields ... Create Portfolio collection for managing website portfolio items. Includes title, slug, url, image, description, websiteType, and tags fields. Configured access control for authenticated create/ update/delete operations with public read access.	2026-01-31 12:54:36 +08:00