jackyu66gitandCursor
62cd8c45dd
Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。 Co-authored-by: Cursor <cursoragent@cursor.com>
1.1 KiB
1.1 KiB
Feature Spec: GrowthInsights · FunnelDefinition（Ops · ECR-039）
Status:
Active（Loop continuous · ECR-039 Closed）
Parent: WAVE0-FROZEN · Predecessor: ECR-038 Closed
Capability:GrowthInsights· BC:Analytics_OpsB
授权：docs/WAVE0/LOOP_AUTHORIZATION.md
Non-goals
漏斗写配置 · UGC · 真支付
L2 Domain
| 概念 | 语义 |
|---|---|
FunnelDefinition |
本切片只读目录；code 唯一（若适用） |
L3 API
| Method | Path | 权限 | 语义 |
|---|---|---|---|
| GET | /admin/analytics/funnel-definitions |
admin.growth.read |
只读 |
| GET | /admin/analytics/funnel-definitions/{id} |
admin.growth.read |
只读 |
Migration
000040：表 + 种子（若有）（权限复用）
L4 AC
| ID | Then |
|---|---|
| AC-F-01 | list 含种子或空列表合法 |
| AC-F-02 | 已知 id get 200 |
| AC-F-03 | 未知 id → 404 |
| AC-S-01 | 无 Admin → 401 |
| AC-S-02 | 无权限 → 403 |
| AC-P-01 | list < 500ms |
| AC-O-01 | N/A 只读 |
contract_diff: docs/CONTRACT_DIFF/ECR-039.yaml