Repository navigation

feat(permissions): delegated dashboard access + route-derived permission registry - #66

Open

Abdulkhalek-1 wants to merge 36 commits into

mainfrom

feat/delegated-dashboard-access

Open

feat(permissions): delegated dashboard access + route-derived permission registry#66
Abdulkhalek-1 wants to merge 36 commits into
mainfrom
feat/delegated-dashboard-access

Commits on Jul 28, 2026
- docs(permissions): spec delegated dashboard access + generated registry
  
  Abdulkhalek-1
  and
  claude
  committed
  93eb846
- docs(permissions): implementation plan for delegated dashboard access
  
  Abdulkhalek-1
  and
  claude
  committed
  934b045
- docs(permissions): correct plan test commands for Docker and target the existing resolve test
  
  Abdulkhalek-1
  and
  claude
  committed
  ea411de
- refactor(dashboard): answer owner/admin/member in one authority lookup
  Abdulkhalek-1
  committed
  1204c1b
- feat(permissions): resolve explicit grants for non-admin guild members
  Abdulkhalek-1
  committed
  213a38a
- feat(permissions): gate guild routes on any authority, not admin-ness
  Abdulkhalek-1
  committed
  859d19f
- fix(permissions): drop new test cast, name the size>0 discriminator
  Abdulkhalek-1
  committed
  7715ec0
- feat(permissions): require dashboard.lookups.view for Discord passthroughs
  
  Abdulkhalek-1
  and
  claude
  committed
  a04bcd1
- fix(tests): strengthen dashboard.lookups.view 403 test to assert the key
  
  Abdulkhalek-1
  and
  claude
  committed
  0381607
- fix(permissions): block privilege escalation via role assignment
  Abdulkhalek-1
  committed
  a9d2f31
- feat(guilds): list guilds where the user holds dashboard grants
  
  Abdulkhalek-1
  and
  claude
  committed
  2370a42
- feat(guilds): badge servers reached through delegated access
  Abdulkhalek-1
  committed
  eeac7b2
- feat(permissions): derive the permission registry from the route table
  Abdulkhalek-1
  committed
  232a9b5
- fix(permissions): make the registry drift-guard actually run in CI
  Abdulkhalek-1
  committed
  36834fc
- refactor(permissions): drop the hand-maintained permission registry
  Abdulkhalek-1
  committed
  a35b824
- test(permissions): cover wildcard preset entries in the drift test
  
  Abdulkhalek-1
  and
  claude
  committed
  0e7993e
- feat(permissions): render the permission grid from the served registry
  
  Abdulkhalek-1
  and
  claude
  committed
  4e9a9c2
- fix(permissions): show loading and error states for the registry fetch
  
  Abdulkhalek-1
  and
  claude
  committed
  cb998a0
- fix(permissions): remove test cast and re-indent nested grid JSX
  
  Abdulkhalek-1
  and
  claude
  committed
  cfc29e8
- i18n(permissions): translate registry module, resource, and action labels
  
  Abdulkhalek-1
  and
  claude
  committed
  946f3a3
- fix(i18n): move permission-keys test into dashboard suite, drop i18n test infra
  
  Abdulkhalek-1
  and
  claude
  committed
  7023432
- fix(i18n): re-translate sr additions into Serbian Latin, not Cyrillic
  
  Abdulkhalek-1
  and
  claude
  committed
  b38179a
- fix(overview): render for users without analytics permission
  
  Abdulkhalek-1
  and
  claude
  committed
  d2599e4
- fix(overview): namespace-prefix AccessSummary nav labels
  
  Abdulkhalek-1
  and
  claude
  committed
  e17f8d1
- feat(permissions): warn when a role lacks picker access
  Abdulkhalek-1
  committed
  600776e
- fix(permissions): warning variant styling + render coverage for lookups warning
  
  Abdulkhalek-1
  and
  claude
  committed
  0dcae31
- test(permissions): cover delegated grant resolution against the real DB
  Abdulkhalek-1
  committed
  5f2f5e8
- docs(permissions): record delegated access in the feature spec
  
  Abdulkhalek-1
  and
  claude
  committed
  24c0adb
- fix(permissions): gate isDefault promotion behind the escalation guard
  
  Abdulkhalek-1
  and
  claude
  committed
  bbdcdd5
- fix(permissions): stop asserting security posture on 403; disable ungrantable checkboxes
  
  Abdulkhalek-1
  and
  claude
  committed
  e34f756
- fix(permissions): reuse safeParsePermissions in the auth path; pin getGuildAuthority arg order
  
  Abdulkhalek-1
  and
  claude
  committed
  b915ae3
- chore(permissions): remove dead code and fix stale docs
  
  Abdulkhalek-1
  and
  claude
  committed
  ec01e9e
- fix(permissions): gate the module select-all checkbox behind the escalation check
  
  Abdulkhalek-1
  and
  claude
  committed
  ea08fd7
- feat(permissions): assign dashboard roles to members
  
  Abdulkhalek-1
  and
  claude
  committed
  820a928
- fix(permissions): close the self-assign auth race and dedupe member search UI
  
  Abdulkhalek-1
  and
  claude
  committed
  973028d
- fix(permissions): gate self-assign exclusion on confirmed identity, not loading state
  
  Abdulkhalek-1
  and
  claude
  committed
  0210131

Commits

Commits on Jul 28, 2026