#205: classification inheritance + guarded, audited lowering #264

Merged

fable-5 merged 1 commits from issue-205-classification-inheritance into main 2026-07-31 06:49:15 +02:00

Conversation 0 Commits 1 Files Changed 11 +444 -15

fable-5 commented 2026-07-31 06:12:38 +02:00

Collaborator

Copy Link

Implements #205 (M26): inherit on create (max of instance default and parent), raise-on-move for the whole moved subtree, no lowering as a side effect (incl. trash-/purge-promote, pinned by test). Lowering needs the dedicated capability canLowerClassification (pond-wide Pond Admin) in the central permission model; raises and lowers audited (catalogue v1.1). Stacked on #263.

Implements #205 (M26): inherit on create (max of instance default and parent), raise-on-move for the whole moved subtree, no lowering as a side effect (incl. trash-/purge-promote, pinned by test). Lowering needs the dedicated capability canLowerClassification (pond-wide Pond Admin) in the central permission model; raises and lowers audited (catalogue v1.1). Stacked on #263.

fable-5 added 2 commits 2026-07-31 06:12:39 +02:00

#204: classification as first-class page metadata (ADR 0022) ... 183faf7710

Enum field on Page (UNCLASSIFIED default, VS_NFD), migration backfills
existing pages. New pages take the instance-wide default from
classification.newPageDefault (admin-visible, de+en). The value rides in
every PageView, so no channel needs an extra request. The field is a
marking, not a protection mechanism: a test pins that permission
decisions are unchanged by it. The marking wording is fixed in ADR 0022
and sourced solely from classificationMarking() in @dorfteich/shared.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>

#205: classification inherits down the tree; lowering is a guarded, audited act ... 488d0d06f1

New pages take max(instance default, parent level); moving a subtree
under a higher-classified parent raises every member below that level.
No move-like path (reposition, trash-promote, purge-promote) lowers a
level as a side effect — pinned by test. Raising is ordinary editorial
work; lowering requires the dedicated capability canLowerClassification
(pond-wide Pond Admin) in the central permission model. Both directions
are audited (page.classification_raised/_lowered, catalogue v1.1) with
old value, new value, actor and page.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>

fable-5 referenced this pull request 2026-07-31 06:18:59 +02:00

#206: VS-NfD marking in the web view (top+bottom) #265

fable-5 merged commit 488d0d06f1 into main 2026-07-31 06:49:15 +02:00

fable-5 referenced this pull request 2026-07-31 06:50:15 +02:00

[VS-NfD] Inherit classification in the page tree; require a dedicated right to downgrade #205

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area:auth

  

area:docs

  

area:export

  

area:ops

  

area:storage

  

area:supply-chain

  

auth

Authentication, permissions, quotas

  

backend

API server (apps/api)

  

blocked

Blocked on external dependency/infrastructure

  

collab

Collaboration server (apps/collab)

  

deployment

Docker, CI/CD, hosting

  

docs

Documentation

  

effort:L

  

effort:M

  

effort:S

  

frontend

SPA (apps/web)

  

plugins

Plugin system and SDK

  

qa

Tests, fixtures, e2e

  

vs-nfd

  

vs-nfd:blocker

No Label

area:auth

area:docs

area:export

area:ops

area:storage

area:supply-chain

auth

backend

blocked

collab

deployment

docs

effort:L

effort:M

effort:S

frontend

plugins

qa

vs-nfd

vs-nfd:blocker

Milestone

Clear milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

No Assignees

1 Participants

Notifications

Subscribe

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stwaidele/dorfteich#264

No description provided.