scripte/nexarch
1
0 Fork 0
Code Issues 1 Pull Requests 21 Actions 115 Packages Projects Releases Wiki Activity

DOK-03: ACL-Daten-Migration nach Core-Rechtemodell #261

Merged
patrick merged 1 commits from feature/dok-03-acl-daten-migration-core-rechtemodell into main 2026-10-14 16:39:55 +02:00
Conversation 0 Commits 1 Files Changed 4
+579
patrick commented 2026-10-14 16:30:58 +02:00
Owner
Copy link
Copy source

Migration von archivdms document_visibility/permission_groups/*_grants in das Core-Rechtemodell (RBAC-02 object_acl), nicht in eine DMS-eigene Struktur. Neues Paket internal/migrationacl im Core-Root-Modul (bewusste Platzierung: dms ist eigenes Go-Modul ohne Core-Abhaengigkeit, Migration beschreibt ausschliesslich Core-Tabellen). Fail-closed bei unbekanntem Principal/Recht/Effekt oder nicht aufloesbarer Referenz.\n\nPruefungen (echt durchgefuehrt, synthetische Fixtures, Wegwerf-DB):\n- TestMigrateAll_GrantsReadForUserAndGroup PASS\n- TestMigrateAll_AdversarialGroupIsolation PASS (fail-closed/Default-Deny bestaetigt)\n- TestMigrateAll_AbortsOnUnresolvableGroup PASS\n- TestMigrateAll_RejectsUnknownValues (3 Subtests) PASS\n- go build/go vet sauber, gofmt clean\n\nProtokoll: docs/DOK-03-PRUEFPROTOKOLL.md\n\n🤖 Generated with Claude Code

Migration von archivdms document_visibility/permission_groups/*_grants in das Core-Rechtemodell (RBAC-02 object_acl), nicht in eine DMS-eigene Struktur. Neues Paket `internal/migrationacl` im Core-Root-Modul (bewusste Platzierung: dms ist eigenes Go-Modul ohne Core-Abhaengigkeit, Migration beschreibt ausschliesslich Core-Tabellen). Fail-closed bei unbekanntem Principal/Recht/Effekt oder nicht aufloesbarer Referenz.\n\n**Pruefungen (echt durchgefuehrt, synthetische Fixtures, Wegwerf-DB):**\n- TestMigrateAll_GrantsReadForUserAndGroup PASS\n- TestMigrateAll_AdversarialGroupIsolation PASS (fail-closed/Default-Deny bestaetigt)\n- TestMigrateAll_AbortsOnUnresolvableGroup PASS\n- TestMigrateAll_RejectsUnknownValues (3 Subtests) PASS\n- go build/go vet sauber, gofmt clean\n\nProtokoll: docs/DOK-03-PRUEFPROTOKOLL.md\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)
patrick added 1 commit 2026-10-14 16:30:59 +02:00
DOK-03: acl-daten-migration-nach-core-rechtemodell
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
Details
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (pull_request) Canceled after 0s
Details
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
Details
CI / Core-Modul (Build/Vet/Test) (pull_request) Canceled after 0s
Details
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (pull_request) Canceled after 0s
Details
CI / Connect Security-Test-Gate (QA-01 AC4, Merge-Gate) (pull_request) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (pull_request) Canceled after 0s
Details
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
Details
CI / Web (dms-browser) (push) Canceled after 0s
Details
CI / Web (pdf-viewer) (push) Canceled after 0s
Details
CI / Web (shl) (push) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
Details
CI / Web (dms-browser) (pull_request) Canceled after 0s
Details
CI / Web (pdf-viewer) (pull_request) Canceled after 0s
Details
CI / Web (shl) (pull_request) Canceled after 0s
Details
Core-Schnittstellen-Vertragstests / contract-tests (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (Go) / govulncheck (pull_request) Canceled after 0s
Details
Supply-Chain-Scan (npm) / npm-audit (pull_request) Canceled after 0s
Details
Core-Pflichttest-Gate / pflichttest-gate (pull_request) Canceled after 0s
Details
RBAC-Rollenhierarchie-Pflichtgate / rbac-policy-invariant (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (pull_request) Canceled after 0s
Details
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Details
352b6cd4dd 
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
patrick merged commit fc8746dd4a into main 2026-10-14 16:39:55 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
patrick
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: scripte/nexarch#261