scripte/nexarch
1
0 Fork 0
Code Issues 1 Pull Requests 21 Actions 7 Packages Projects Releases Wiki Activity

RBAC-11: Objektrechte mit Vererbung für Ordner #124

Closed
patrick wants to merge 0 commits from feature/rbac-11-objektrechte-vererbung-ordner into integration/gesamtprojekt
pull from: feature/rbac-11-objektrechte-vererbung-ordner
merge into: scripte:integration/gesamtprojekt
Conversation 0 Commits - Files Changed -
patrick commented 2026-09-22 11:56:44 +02:00
Owner
Copy link
Copy source

Objektrechte (Ordner/Dokument, Nutzer/Gruppe, read/write/manage, allow/deny) mit Vererbung entlang des Ordnerbaums, Unterbrechung, Gruppenmitgliedschaft, explizitem Verweigern gegen Erlauben. Eigenständiger Anfragemodus über den bestehenden /authorize-Endpunkt (RBAC-06/RBAC-10), bestehende role/permission-Aufrufer unverändert.

Details, Entscheidungen und Prüfergebnisse: docs/RBAC-11-PRUEFPROTOKOLL.md.

Prüfungen (Host 204):

  • Vererbungsmatrix (tiefer Baum, Unterbrechung, Gruppe, Deny-über-Allow, Verschieben): bestanden
  • Leistung: 10.000 Objekte, Tiefe 10, Ziel p95 < 50 ms — gemessen p95 = 3,22 ms
  • Negativfälle (fremder Mandant, gelöschtes Objekt, ungültige ID, Zyklus, Policy-Ausfall): bestanden
  • go build/go vet/gofmt: sauber, go test ./internal/policy/... ./internal/policyapi/...: alle ok
  • scripts/e2e-core-dms.sh: 10/10 (Regression)

Kein Merge, kein Deploy.

🤖 Generated with Claude Code

Objektrechte (Ordner/Dokument, Nutzer/Gruppe, read/write/manage, allow/deny) mit Vererbung entlang des Ordnerbaums, Unterbrechung, Gruppenmitgliedschaft, explizitem Verweigern gegen Erlauben. Eigenständiger Anfragemodus über den bestehenden `/authorize`-Endpunkt (RBAC-06/RBAC-10), bestehende role/permission-Aufrufer unverändert. Details, Entscheidungen und Prüfergebnisse: `docs/RBAC-11-PRUEFPROTOKOLL.md`. **Prüfungen (Host 204):** - Vererbungsmatrix (tiefer Baum, Unterbrechung, Gruppe, Deny-über-Allow, Verschieben): bestanden - Leistung: 10.000 Objekte, Tiefe 10, Ziel p95 < 50 ms — gemessen p95 = 3,22 ms - Negativfälle (fremder Mandant, gelöschtes Objekt, ungültige ID, Zyklus, Policy-Ausfall): bestanden - `go build`/`go vet`/`gofmt`: sauber, `go test ./internal/policy/... ./internal/policyapi/...`: alle ok - `scripts/e2e-core-dms.sh`: 10/10 (Regression) Kein Merge, kein Deploy. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 2 commits 2026-09-22 11:56:44 +02:00
RBAC-11: objektrechte mit vererbung für ordner
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details
77a89a9fcb 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
RBAC-11: prüfprotokoll
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Details
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Details
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Details
CI / Web (dms-browser) (pull_request) Canceled after 0s
Details
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Details
CI / Web (shl) (pull_request) Canceled after 0s
Details
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Details
38e4fe0098 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick closed this pull request 2026-09-25 23:30:37 +02:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
patrick
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#124