nexarch

5 Commits

Include renames

Author	SHA1	Message	Date
patrick	641940d06c	Merge remote-tracking branch 'origin/feature/qa-15-phase2a-sicherheitsbehebung' into integration/gesamtprojekt # Conflicts: # cmd/policy-api/main.go	2026-09-22 02:50:43 +02:00
patrickandClaude Sonnet 5	c5fddad8a5	API-17: gehaertete HTTP-Server (Timeouts, Body-Limit) in allen Diensten (QA-15 F-05) Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-22 00:49:27 +02:00
patrickandClaude Sonnet 5	824e2d8b10	RBAC-10: imports in policy-api, struktur des EnforceConfig CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s Details CI / Web (dms-browser) (push) Canceled after 0s Details CI / Web (pdf-viewer) (push) Canceled after 0s Details CI / Web (shl) (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-21 23:38:40 +02:00
patrickandClaude Sonnet 5	b3ba0fdfa6	RBAC-10: mandant und modulaktivierung in authorize CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s Details CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s Details CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s Details CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s Details CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s Details CI / Web (dms-browser) (push) Canceled after 0s Details CI / Web (pdf-viewer) (push) Canceled after 0s Details CI / Web (shl) (push) Canceled after 0s Details Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s Details POST /authorize nimmt optional den Mandanten entgegen und wertet modulgebundene Rechte ueber AuthorizeForTenant aus (fail closed). Mandant ist Pflicht fuer Rechte mit Modul-Bindung, das Service-Token laesst sich auf Mandanten einschraenken. Migration 0012 bindet die dms.*-Rechte an das Flag dms. Der DMS-policyclient sendet den Mandanten mit und trennt den Cache je Mandant. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-09-21 23:38:02 +02:00
sysops	e8d04f244b	feat(core): RBAC-06 modulübergreifender HTTP-Endpunkt für Policy-Entscheidungen internal/policyapi: POST /authorize wrapt policy.Enforcer.Authorize (RBAC-02) fuer physisch getrennte Module (DMS, Mail, Archive) - reiner Wrapper, keine zweite Autorisierungslogik, 100 Stichproben beweisen Uebereinstimmung mit dem direkten Enforcer-Aufruf. Service-Auth ueber schlanken, timing-safe verglichenen Token statt moduleregistrys schwererem Credential-System (unnoetige internal/flag-Abhaengigkeit, nie mit internal/policy gemergt). Ersetzt spaeter das dokumentierte RET-06-API-Provisorium (Archive, eigenes Folgeticket). Reale Rechtevergabe-Luecke auf policy_rules gefunden und behoben (Tabelle von frueherem Testlauf unter anderem Owner). Real auf 131 deployed, beide Pfade (Allow/Deny) per curl end-to-end verifiziert.	2026-08-30 02:24:55 +02:00