sysops
46d7bfe608
- SEC-01: Privilege Escalation verhindert — Rollenhierarchie in Create/Update/DeleteUser
- SEC-02: Tenant-Isolation in Update/DeleteUser — domain_admin nur eigene Nutzer
- SEC-03: IMAP/POP3 Owner-Check via auth.HasRole statt direktem String-Vergleich
- SEC-05: Export PDF/ZIP prüft Tenant-Zugehörigkeit vor Dateiausgabe
- SEC-08: HKDF-SHA256 trennt JWT-Secret von AES-Key (archivmail-jwt-v1 / archivmail-aes-v1)
- SEC-17: handleSecurityFix erfordert requireRole(superadmin)
- SEC-22: Mail-ID Regex [0-9a-f]{64} in allen Handlern (Path-Traversal-Schutz)
- SEC-26: SMTP Fail-Closed — leere AllowedIPs blockiert alles statt zu erlauben
- SEC-28: handleGetRaw — Parse-Fehler bricht ab statt Fallthrough zu Dateizugriff
BREAKING: IMAP/POP3/LDAP-Passwörter müssen nach Deploy einmalig neu eingegeben
werden (neuer AES-Key). JWT-Sessions laufen ab (einmaliges Re-Login nötig).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
3.0 KiB
3.0 KiB
Feature Index
Central tracking for all features. Updated by skills automatically.
Status Legend
- Planned - Requirements written, ready for development
- In Progress - Currently being built
- In Review - QA testing in progress
- Deployed - Live in production
Features
| ID | Feature | Status | Spec | Created |
|---|---|---|---|---|
| PROJ-1 | Nutzer-Authentifizierung & Rollen (User/Admin) | Deployed | PROJ-1 | 2026-03-12 |
| PROJ-2 | E-Mail-Import: EML/MBOX Upload | Deployed | PROJ-2 | 2026-03-12 |
| PROJ-3 | E-Mail-Import: IMAP-Verbindung | Deployed | PROJ-3 | 2026-03-12 |
| PROJ-4 | E-Mail-Import: SMTP-Eingang via BCC (primär) | Deployed | PROJ-4 | 2026-03-12 |
| PROJ-5 | E-Mail-Speicherung & Volltext-Indexierung | Deployed | PROJ-5 | 2026-03-12 |
| PROJ-6 | Volltext-Suche & Filterung | Deployed | PROJ-6 | 2026-03-12 |
| PROJ-7 | E-Mail-Ansicht (Lesen & Anhänge) | Deployed | PROJ-7 | 2026-03-12 |
| PROJ-8 | Automatischer IMAP-Sync (Cron-Job) | Deployed | PROJ-8 | 2026-03-12 |
| PROJ-9 | Ordner- & Label-Verwaltung | In Progress | PROJ-9 | 2026-03-12 |
| PROJ-10 | Admin-Bereich: Nutzer- & Postfachverwaltung | Deployed | PROJ-10 | 2026-03-12 |
| PROJ-11 | Audit-Log & Compliance-Berichte | Deployed | PROJ-11 | 2026-03-12 |
| PROJ-12 | E-Mail-Export (EML/PDF) | Deployed | PROJ-12 | 2026-03-12 |
| PROJ-13 | REST API für externe CRM-Anbindung | In Progress | PROJ-13 | 2026-03-13 |
| PROJ-14 | E-Mail-Import: POP3-Verbindung | Deployed | PROJ-14 | 2026-03-13 |
| PROJ-15 | CLI Import & Export (archivmail-User) | Deployed | PROJ-15 | 2026-03-13 |
| PROJ-16 | LDAP / Active Directory Anbindung | In Progress | PROJ-16 | 2026-03-13 |
| PROJ-17 | Admin Dashboard – Systemauslastung & Archiv-Übersicht | Deployed | PROJ-17 | 2026-03-14 | | PROJ-18 | E-Mail Integritätsprüfung | Deployed | PROJ-18 | 2026-03-14 | | PROJ-19 | Mailpiler → archivmail Migrationstool | Deployed | PROJ-19 | 2026-03-17 | | PROJ-20 | Nutzer-Löschung & E-Mail-Verbleib (GoBD-konform) | Deployed | PROJ-20 | 2026-03-17 | | PROJ-21 | Multi-Mandanten-Fähigkeit (Multi-Tenancy) | In Progress | PROJ-21 | 2026-03-17 | | PROJ-22 | LDAP / AD – Web-GUI Konfiguration & Test | Deployed | PROJ-22 | 2026-03-17 | | PROJ-23 | Pro-Mandant LDAP / Active Directory (Multi-Tenant Phase B) | Planned | PROJ-23 | 2026-03-17 |