Ask/catalog 权限与审计加固、量表读权限统一,以及未提交的 ops hardening 变更。 Co-authored-by: Cursor <cursoragent@cursor.com>
42 lines
1.1 KiB
Markdown
42 lines
1.1 KiB
Markdown
# Feature Spec: GrowthInsights · FunnelDefinition(Ops · ECR-039)
|
||
|
||
> Status: `Active`(Loop continuous · **ECR-039 Closed**)
|
||
> Parent: WAVE0-FROZEN · Predecessor: ECR-038 Closed
|
||
> Capability: `GrowthInsights` · BC: `Analytics_OpsB`
|
||
> 授权:`docs/WAVE0/LOOP_AUTHORIZATION.md`
|
||
|
||
## Non-goals
|
||
|
||
漏斗写配置 · UGC · 真支付
|
||
|
||
## L2 Domain
|
||
|
||
| 概念 | 语义 |
|
||
|------|------|
|
||
| `FunnelDefinition` | 本切片只读目录;code 唯一(若适用) |
|
||
|
||
## L3 API
|
||
|
||
| Method | Path | 权限 | 语义 |
|
||
|--------|------|------|------|
|
||
| GET | `/admin/analytics/funnel-definitions` | `admin.growth.read` | 只读 |
|
||
| GET | `/admin/analytics/funnel-definitions/{id}` | `admin.growth.read` | 只读 |
|
||
|
||
## Migration
|
||
|
||
`000040`:表 + 种子(若有)(权限复用)
|
||
|
||
## L4 AC
|
||
|
||
| ID | Then |
|
||
|----|------|
|
||
| AC-F-01 | list 含种子或空列表合法 |
|
||
| AC-F-02 | 已知 id get 200 |
|
||
| AC-F-03 | 未知 id → 404 |
|
||
| AC-S-01 | 无 Admin → 401 |
|
||
| AC-S-02 | 无权限 → 403 |
|
||
| AC-P-01 | list < 500ms |
|
||
| AC-O-01 | N/A 只读 |
|
||
|
||
contract_diff: `docs/CONTRACT_DIFF/ECR-039.yaml`
|