scripte/nexarch
1
0 Fork 0
Code Issues 1 Pull Requests 24 Actions Packages Projects Releases Wiki Activity

RBAC-12: Rechte-Katalog fuer Mail/Workflow/AI/Connect/Core-Admin #213

Closed
patrick wants to merge 0 commits from feature/rbac-12-rechte-katalog-restliche-module into main
pull from: feature/rbac-12-rechte-katalog-restliche-module
merge into: scripte:main
Conversation 0 Commits - Files Changed -
patrick commented 2026-09-26 16:24:24 +02:00
Owner
Copy link
Copy source

Migration 0018: 28 echte Rechte fuer die 5 Module, die bislang nur erfundene Portal-Platzhalter hatten. Echte Durchsetzung verdrahtet fuer Mail und Connect (echte Allow/Deny-Tests gruen). Workflow/AI/Core-Admin nur Katalog-Eintrag -- echte Durchsetzung braucht dort zuerst eine Rolle/Mandant-Erweiterung ihrer Identitaetsschicht, ehrlich als offen dokumentiert statt vorgetaeuscht. Migration real geprueft: idempotent, sauberer Rollback, dms.*-Rechte unveraendert (38/38). Kein Merge, kein Deploy.

🤖 Generated with Claude Code

Migration 0018: 28 echte Rechte fuer die 5 Module, die bislang nur erfundene Portal-Platzhalter hatten. Echte Durchsetzung verdrahtet fuer Mail und Connect (echte Allow/Deny-Tests gruen). Workflow/AI/Core-Admin nur Katalog-Eintrag -- echte Durchsetzung braucht dort zuerst eine Rolle/Mandant-Erweiterung ihrer Identitaetsschicht, ehrlich als offen dokumentiert statt vorgetaeuscht. Migration real geprueft: idempotent, sauberer Rollback, dms.*-Rechte unveraendert (38/38). Kein Merge, kein Deploy. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 2 commits 2026-09-26 16:24:24 +02:00
RBAC-12: echte rechte katalog fuer mail workflow ai connect core admin
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details
e70c87332c 
Neue Migration 0018_module_policy_rules: 28 echte, granulare Rechte fuer
Mail/Workflow/AI/Connect/Core-Admin (bisher nur DMS befuellt). Echte
Durchsetzung verdrahtet fuer Mail (GET /messages, hat Rolle+Mandant aus
Modul-Token) und Connect (GET /connectors/status, Mandant aus Header,
Rolle mangels eigenem Rollenkonzept fest user). Workflow/AI/Core-Admin
erhalten nur den Rechte-Katalog-Eintrag (AK1/2) -- echte Durchsetzung
dort wuerde deren Identitaetsschicht um Rolle/Mandant erweitern muessen,
das ist eine groessere, separate Aenderung je Modul, nicht Teil dieser
Kachel (siehe Bericht).

Migration real geprueft: 28 Zeilen nach Erstlauf, idempotent (0 neue
beim Zweitlauf), sauberer Rollback (0 nach DELETE), dms.*-Rechte
unveraendert (38 vorher/nachher).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
RBAC-12: Pruefprotokoll
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Details
CI / Web (dms-browser) (pull_request) Canceled after 0s
Details
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Details
CI / Web (shl) (pull_request) Canceled after 0s
Details
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Details
Mail-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Details
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Details
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Details
bb88106db5
patrick closed this pull request 2026-10-17 13:45:54 +02:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
patrick
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#213