alan/maintenance_tracker_for_nextcloud
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 2 Wiki Activity Actions

Add capability authorization and audit foundation #5

Merged
alan merged 1 commit from feature/authorization-audit-v0.1.3 into main 2026-09-05 00:35:50 +00:00
Conversation 1 Commits 1 Files changed 43 +1957 -585
alan commented 2026-09-05 00:28:31 +00:00
Owner
Copy link
No description provided.
Add capability authorization and audit foundation
All checks were successful
CI / PHP 8.5 (pull_request) Successful in 17s
Details
CI / Frontend and generated assets (pull_request) Successful in 17s
Details
CI / PHP 8.2 (pull_request) Successful in 24s
Details
CI / Nextcloud 34 / pgsql (pull_request) Successful in 1m26s
Details
CI / Nextcloud 34 / sqlite (pull_request) Successful in 2m11s
Details
CI / Unsigned install candidate (pull_request) Successful in 48s
Details
878c0002a9
alan commented 2026-09-05 00:28:59 +00:00
Author
Owner
Copy link

Summary

Adds the v0.1.3 authorization, collaboration, and audit foundation.

  • replaces role-rank authorization with explicit capabilities
  • introduces Owner, Manager, Contributor, and Viewer roles
  • migrates legacy editor memberships to Manager
  • adds shared-workspace membership APIs
  • adds deterministic membership/lifecycle locking
  • adds append-only audit events and audit API
  • preserves audit actor attribution after account deletion
  • expands Nextcloud 34 multi-user lifecycle integration coverage
  • synchronizes architecture, security, API, domain-model, roadmap,
    profile, evidence, offline/PWA, and work-definition documentation

Qualification

Local qualification passed:

  • PHP 8.5.4: 31 tests, 203 assertions
  • project validator and negative self-tests
  • profile validation
  • TypeScript
  • ESLint
  • Stylelint
  • deterministic production build
  • generated asset identity
  • Nextcloud 34 / SQLite
  • Nextcloud 34 / PostgreSQL
  • Node 24.20.0 / npm 11.17.0

Baseline: 3ad5639
Candidate: 878c0002a90d6aea654d2cf308b129080b12ef37

## Summary Adds the v0.1.3 authorization, collaboration, and audit foundation. - replaces role-rank authorization with explicit capabilities - introduces Owner, Manager, Contributor, and Viewer roles - migrates legacy editor memberships to Manager - adds shared-workspace membership APIs - adds deterministic membership/lifecycle locking - adds append-only audit events and audit API - preserves audit actor attribution after account deletion - expands Nextcloud 34 multi-user lifecycle integration coverage - synchronizes architecture, security, API, domain-model, roadmap, profile, evidence, offline/PWA, and work-definition documentation ## Qualification Local qualification passed: - PHP 8.5.4: 31 tests, 203 assertions - project validator and negative self-tests - profile validation - TypeScript - ESLint - Stylelint - deterministic production build - generated asset identity - Nextcloud 34 / SQLite - Nextcloud 34 / PostgreSQL - Node 24.20.0 / npm 11.17.0 Baseline: `3ad5639` Candidate: `878c0002a90d6aea654d2cf308b129080b12ef37`
alan merged commit a130db29dd into main 2026-09-05 00:35:50 +00:00
alan deleted branch feature/authorization-audit-v0.1.3 2026-09-05 00:35:50 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
alan/maintenance_tracker_for_nextcloud!5
No description provided.