scripte/nexarch
1
0 Fork 0
Code Issues 1 Pull Requests 24 Actions 2 Packages Projects Releases Wiki Activity

DOC-23: RBAC-11-Objektrechte im DMS verdrahten #126

Closed
patrick wants to merge 0 commits from feature/doc-23-rbac-11-objektrechte-im-dms-verdrahten into integration/gesamtprojekt
pull from: feature/doc-23-rbac-11-objektrechte-im-dms-verdrahten
merge into: scripte:integration/gesamtprojekt
Conversation 0 Commits - Files Changed -
patrick commented 2026-09-22 12:53:23 +02:00
Owner
Copy link
Copy source

RBAC-11 (Core) hat einen eigenständigen Objekt-ACL-Anfragemodus gebaut, das DMS nutzte ihn bisher nicht. Ordner- und Dokumentzugriff fragt jetzt zusätzlich zur Modulrecht-Prüfung die Objekt-ACL ab, wenn für den Ordner eine gesetzt ist; ohne ACL bleibt das Verhalten unverändert.

Prüfungen (siehe dms/docs/DOC-23-PRUEFPROTOKOLL.md):

  • AC1 Ordner mit ACL zeigt nur berechtigten Nutzern, Rechteentzug wirkt sofort: bestanden
  • AC2 Ordner ohne ACL unverändert: bestanden
  • AC3 Core-Ausfall fail closed: bestanden
  • Vererbung auf Unterordner (Pfadübergabe): bestanden
  • Mandantentrennung: bestanden
  • Endpunkte real gegen Core geprüft (Wegwerf-Cluster 17/coredev): bestanden
  • go test ./internal/folderapi/... ./internal/apiwiring/... ./cmd/app/... (DMS): ok
  • go test ./internal/policy/... ./internal/policyapi/... (Core): ok
  • scripts/e2e-core-dms.sh (Regression): 10/10

Kein Merge, kein Deploy.

🤖 Generated with Claude Code

RBAC-11 (Core) hat einen eigenständigen Objekt-ACL-Anfragemodus gebaut, das DMS nutzte ihn bisher nicht. Ordner- und Dokumentzugriff fragt jetzt zusätzlich zur Modulrecht-Prüfung die Objekt-ACL ab, wenn für den Ordner eine gesetzt ist; ohne ACL bleibt das Verhalten unverändert. **Prüfungen (siehe dms/docs/DOC-23-PRUEFPROTOKOLL.md):** - AC1 Ordner mit ACL zeigt nur berechtigten Nutzern, Rechteentzug wirkt sofort: bestanden - AC2 Ordner ohne ACL unverändert: bestanden - AC3 Core-Ausfall fail closed: bestanden - Vererbung auf Unterordner (Pfadübergabe): bestanden - Mandantentrennung: bestanden - Endpunkte real gegen Core geprüft (Wegwerf-Cluster 17/coredev): bestanden - go test ./internal/folderapi/... ./internal/apiwiring/... ./cmd/app/... (DMS): ok - go test ./internal/policy/... ./internal/policyapi/... (Core): ok - scripts/e2e-core-dms.sh (Regression): 10/10 Kein Merge, kein Deploy. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 2 commits 2026-09-22 12:53:23 +02:00
DOC-23: rbac-11-objektrechte im dms verdrahten
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details
457346ccd1 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
DOC-23: Prüfprotokoll
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Details
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Details
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Details
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Details
CI / Web (dms-browser) (pull_request) Canceled after 0s
Details
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Details
CI / Web (shl) (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Details
61c98da2db 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick closed this pull request 2026-09-25 23:30:35 +02:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
patrick
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#126