scripte/nexarch
1
0 Fork 0
Code Issues 1 Pull Requests 24 Actions Packages Projects Releases Wiki Activity
1,774 Commits 49 Branches 8 Tags
main
Commit Graph
6 Commits
Author SHA1 Message Date
patrickandClaude Sonnet 5.5 07eb74cadf Root-Modul: apierror und httpharden aus common v0.1.0
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Details
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Successful in 4s
Details
CI / Web (dms-browser) (pull_request) Failing after 1m27s
Details
CI / Web (shl) (pull_request) Failing after 11s
Details
CI / Core-Modul (Build/Vet/Test) (push) Failing after 1m0s
Details
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Successful in 4s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Failing after 19s
Details
CI / Web (dms-browser) (push) Failing after 1m26s
Details
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Successful in 13m12s
Details
CI / Core-Modul (Build/Vet/Test) (pull_request) Failing after 1m0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Successful in 5s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Failing after 21s
Details
CI / Web (pdf-viewer) (pull_request) Failing after 1m2s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Successful in 5s
Details
CI / Web (pdf-viewer) (push) Failing after 1m3s
Details
CI / Web (shl) (push) Failing after 11s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
DB-Integrationstests / db-tests (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Details
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Details
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Details
Core-Schnittstellen-Vertragstests / contract-tests (push) Successful in 12m23s
Details 
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
 2026-10-28 09:37:03 +01:00
patrick 641940d06c Merge remote-tracking branch 'origin/feature/qa-15-phase2a-sicherheitsbehebung' into integration/gesamtprojekt 
# Conflicts:
#	cmd/policy-api/main.go
 2026-09-22 02:50:43 +02:00
patrickandClaude Sonnet 5 c5fddad8a5 API-17: gehaertete HTTP-Server (Timeouts, Body-Limit) in allen Diensten (QA-15 F-05) 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-09-22 00:49:27 +02:00
patrickandClaude Sonnet 5 824e2d8b10 RBAC-10: imports in policy-api, struktur des EnforceConfig
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-09-21 23:38:40 +02:00
patrickandClaude Sonnet 5 b3ba0fdfa6 RBAC-10: mandant und modulaktivierung in authorize
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details 
POST /authorize nimmt optional den Mandanten entgegen und wertet modulgebundene Rechte ueber AuthorizeForTenant aus (fail closed). Mandant ist Pflicht fuer Rechte mit Modul-Bindung, das Service-Token laesst sich auf Mandanten einschraenken. Migration 0012 bindet die dms.*-Rechte an das Flag dms. Der DMS-policyclient sendet den Mandanten mit und trennt den Cache je Mandant.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
 2026-09-21 23:38:02 +02:00
sysops e8d04f244b feat(core): RBAC-06 modulübergreifender HTTP-Endpunkt für Policy-Entscheidungen 
internal/policyapi: POST /authorize wrapt policy.Enforcer.Authorize
(RBAC-02) fuer physisch getrennte Module (DMS, Mail, Archive) - reiner
Wrapper, keine zweite Autorisierungslogik, 100 Stichproben beweisen
Uebereinstimmung mit dem direkten Enforcer-Aufruf. Service-Auth ueber
schlanken, timing-safe verglichenen Token statt moduleregistrys
schwererem Credential-System (unnoetige internal/flag-Abhaengigkeit,
nie mit internal/policy gemergt). Ersetzt spaeter das dokumentierte
RET-06-API-Provisorium (Archive, eigenes Folgeticket). Reale
Rechtevergabe-Luecke auf policy_rules gefunden und behoben (Tabelle
von frueherem Testlauf unter anderem Owner). Real auf 131 deployed,
beide Pfade (Allow/Deny) per curl end-to-end verifiziert.
 2026-08-30 02:24:55 +02:00