schalli/tessera-ctl
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 14 Wiki Activity

docs(roadmap): add Phase 15 module permissions (groups & user grants)

Browse Source 
Two-level module access: tenant activation stays a prerequisite, plus new
per-group and per-user grants. Records the four design decisions taken with
the user: Tessera-owned groups with optional AD binding, closed-by-default
access, ADMIN/SUPER_ADMIN bypass within their tenant, and access on/off only
(no permission levels inside modules). Starts milestone v1.2.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Schalli
2026-08-04 08:42:56 +02:00
parent bd84a26824
commit 7e1b4a2964
3 changed files with 40 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.planning/STATE.md
+4
View File
@@ -103,6 +103,10 @@ Progress: [██████████] 99%
## Accumulated Context
### Roadmap Evolution
- Phase 15 added (2026-08-04): Modul-Berechtigungen — Gruppen & User-Grants. Zweistufiger Modulzugriff (Mandanten-Aktivierung + Grants pro Gruppe/User), Gruppen mit optionaler AD-Bindung, default geschlossen, ADMIN/SUPER_ADMIN umgehen Grants, nur Zugriff an/aus. Startet Milestone v1.2 Plattform-Berechtigungen.
### Decisions
Decisions are logged in PROJECT.md Key Decisions table.