docs: clarify admin-only access and update repo browser tests
Update documentation for https://github.com/amirbiron/CodeBot/pull/3239
The guide now explicitly notes that all manual and automated checks for the multi-repo browser require an admin session, since non-admins are blocked. It updates the pytest setup to set session['user_id'] to ADMIN_USER_ID, adjusts test expectations to admin-only behavior, and adds a new test verifying non-admin users receive a 403 with admin_only for /repo/api/select-repo. The security section is expanded to document how /repo/* routes are protected via the blueprint before_request and _require_admin_for_repo_browser(), including the specific JSON/abort responses and the PR #3239 metadata exposure fix for /repo/api/repos.
Generated by Dosu
Summary by Sourcery
Document and validate administrator-only access across the multi-repository code browser.
Enhancements:
- Clarify that the multi-repository code browser is restricted to administrators and document its blueprint-level security behavior, responses, and fail-closed policy.
Documentation:
- Update the multi-repository implementation guide with administrator-only manual and automated testing guidance and the security implications of the repository browser.
Tests:
- Update repository browser test guidance and expectations for administrator access, including coverage of blocked non-administrator requests.