dorfteich/apps/api/src/permissions
Claude Fable 5 488d0d06f1
Some checks failed
CI / Lint, typecheck, test (pull_request) Successful in 5m40s
CI / Build container images (pull_request) Successful in 4m34s
CI / Auth e2e pack (pull_request) Successful in 9m7s
CI / Import/export fidelity gate (pull_request) Successful in 1m0s
CD / Deploy to Test (push) Blocked by required conditions
CD / Smoke tests against Test (push) Blocked by required conditions
CD / Promote to Int (push) Blocked by required conditions
CI / Auth e2e pack (push) Blocked by required conditions
CI / Import/export fidelity gate (push) Blocked by required conditions
CI / Build container images (push) Blocked by required conditions
CD / Build and push images (push) Has been cancelled
CI / Lint, typecheck, test (push) Has been cancelled
#205: classification inherits down the tree; lowering is a guarded, audited act
New pages take max(instance default, parent level); moving a subtree
under a higher-classified parent raises every member below that level.
No move-like path (reposition, trash-promote, purge-promote) lowers a
level as a side effect — pinned by test. Raising is ordinary editorial
work; lowering requires the dedicated capability canLowerClassification
(pond-wide Pond Admin) in the central permission model. Both directions
are audited (page.classification_raised/_lowered, catalogue v1.1) with
old value, new value, actor and page.

Co-Authored-By: Claude Fable 5 (1M context) <noreply@anthropic.com>
2026-07-31 06:12:26 +02:00
..
permission.decorators.ts Public REST API v1: personal access tokens, instance switch + per-pond opt-in (#104) 2026-07-12 11:17:03 +02:00
permission.guard.ts Public REST API v1: personal access tokens, instance switch + per-pond opt-in (#104) 2026-07-12 11:17:03 +02:00
permission.service.ts #205: classification inherits down the tree; lowering is a guarded, audited act 2026-07-31 06:12:26 +02:00
permissions.e2e.db.test.ts Wire real permissions into collab tokens and revocation (#53) 2026-07-09 18:48:42 +02:00
permissions.module.ts Enforce permissions in API guards and retire interim access (#52) 2026-07-09 16:31:41 +02:00
pond-permission-cache.test.ts Enforce permissions in API guards and retire interim access (#52) 2026-07-09 16:31:41 +02:00
pond-permission-cache.ts Enforce permissions in API guards and retire interim access (#52) 2026-07-09 16:31:41 +02:00
route-permissions.e2e.db.test.ts Enforce permissions in API guards and retire interim access (#52) 2026-07-09 16:31:41 +02:00