schalli/tessera-ctl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

docs(15-01): complete Group/ModuleGrant foundation plan

Browse Source
This commit is contained in:
Schalli
2026-08-04 15:14:21 +02:00
parent 4fd2f2e6a6
commit 79c83eae5f
3 changed files with 25 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.planning/STATE.md
+19 -16
View File
@@ -2,18 +2,18 @@
gsd_state_version: 1.0
milestone: v1.1
milestone_name: Ausschreibungs-Radar
current_phase: 14
current_phase_name: rss-email-alert-ingestion-module-rollout
current_phase: 15
current_phase_name: modul-berechtigungen-gruppen-user-grants
status: executing
stopped_at: Phase 15 UI-SPEC approved
last_updated: "2026-08-04T12:44:05.062Z"
last_activity: 2026-07-23
last_activity_desc: Completed 14-02-PLAN.md (RSS ingestion slice)
stopped_at: Completed 15-01-PLAN.md
last_updated: "2026-08-04T13:14:07.699Z"
last_activity: 2026-08-04
last_activity_desc: Phase 15 execution started
progress:
total_phases: 15
completed_phases: 13
total_plans: 75
completed_plans: 66
completed_plans: 67
---
# Project State
@@ -23,16 +23,16 @@ progress:
See: .planning/PROJECT.md (updated 2026-07-17)
**Core value:** Eine zentrale Plattform, in der beliebige Workflow-Tools als Module lizenziert, aktiviert und genutzt werden koennen -- ohne zwischen verschiedenen Anwendungen wechseln zu muessen.
**Current focus:** Phase 14 — rss-email-alert-ingestion-module-rollout
**Current focus:** Phase 15 — modul-berechtigungen-gruppen-user-grants
## Current Position
Phase: 14 (rss-email-alert-ingestion-module-rollout) — EXECUTING
Plan: 5 of 5
Status: Plan 14-02 complete
Last activity: 2026-07-23 — Completed 14-02-PLAN.md (RSS ingestion slice)
Phase: 15 (modul-berechtigungen-gruppen-user-grants) — EXECUTING
Plan: 2 of 8
Status: Ready to execute
Last activity: 2026-08-04 — Phase 15 execution started
Progress: [██████████] 99%
Progress: [█████████░] 89%
## Performance Metrics
@@ -100,6 +100,7 @@ Progress: [██████████] 99%
| Phase 14 P02 | 30min | 3 tasks | 21 files |
| Phase 14 P04 | 25min | 2 tasks | 6 files |
| Phase 14 P05 | 50min | 3 tasks | 19 files |
| Phase 15 P01 | 24min | 3 tasks | 10 files |
## Accumulated Context
@@ -229,6 +230,8 @@ Recent decisions affecting current work:
- [Phase ?]: 14-05: tenderRadar i18n namespace added; Bundesland/CPV filter option values stay canonical German for backend compatibility, only labels translated; portal display slugs left untranslated as proper nouns
- [Phase ?]: [260728-lih]: DELIBERATE back-compat break — empty groupFilterDns now means 'sync nothing' (was 'import everyone under baseDn'); early-return guard in syncUsersForTenant runs before search/deactivation so an empty selection never mass-deactivates existing LDAP users
- [Phase ?]: [260729-d3k]: syncUsersForTenant no-op guard re-keyed from empty groupFilterDns to empty parsed base-DN list — Base-DN(s) are now the sync scope, groupFilterDns is an optional extra restriction (ou= = extra bases, group DN = memberOf constraint)
- [Phase ?]: [15-01]: D-01/D-05/D-06/D-02 wie in 15-CONTEXT.md gesperrt umgesetzt (Nutzer-Checkpoint mit 'proceed' bestaetigt)
- [Phase ?]: [15-01]: RLS fuer Group/GroupMembership/ModuleGrant aktiviert (T-15-11) statt sie wie Tender* RLS-frei zu lassen
### Pending Todos
@@ -270,7 +273,7 @@ Items acknowledged and carried forward from previous milestone close:
## Session Continuity
Last session: 2026-08-04T11:58:33.872Z
Stopped at: Phase 15 UI-SPEC approved
Resume file: .planning/phases/15-modul-berechtigungen-gruppen-user-grants/15-UI-SPEC.md
Last session: 2026-08-04T13:14:07.663Z
Stopped at: Completed 15-01-PLAN.md
Resume file: None
Last activity: 2026-07-14 - Built LDAP per-user exclude/denylist filter (9d1323f), migration applied on live DB, verified via Playwright: sync deactivated 4 excluded service accounts (administrator/krbtgt/guest/dns-ldap), 2 real LDAP users stay active, 0 wrongly created