patrickandClaude Sonnet 5
3885787560
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
Supply-Chain-Scan (Go) / govulncheck (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
Beim Zusammenfuehren von DOC-22 und INT-20 fehlte die Rechtevergabe fuer die neuen dms.sharelink.*/dms.trigger.*-Rechte (beide Tickets liefen ohne Core-Zugriff auf getrennten Branches). TestDMSRights_EveryCatalogPermissionIsGrantedOrServiceInternal deckte die Luecke beim Verifizieren auf. Entscheidung: sharelink an user+tenant_admin (Alltagsgeschaeft wie dms.document.*), trigger nur an tenant_admin (Automatisierung mit Aussenwirkung/Webhook-Zielwahl, Muster wie dms.autorule.admin/dms.ocr.admin). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>