switchboard/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Releases 9 Wiki Activity

Feat admin rbac migration #2

Merged
xcaliber merged 4 commits from feat/admin-rbac-migration into main 2026-03-26 17:32:32 +00:00
Conversation 0 Commits 4 Files Changed 38 +440 -603
xcaliber commented 2026-03-26 17:32:28 +00:00
Owner
Copy Link
No description provided.
xcaliber added 4 commits 2026-03-26 17:32:28 +00:00
admin → RBAC group migration: grant-based access replaces role check
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 19s
Details
CI/CD / test-frontend (pull_request) Has been skipped
Details
CI/CD / test-go-pg (pull_request) Successful in 2m14s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m56s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m21s
Details
316c9cbfa7 
surface.admin.access permission + seeded Admins system group replaces
hardcoded role == "admin" middleware checks. Admin bypass removed from
RequirePermission — all permissions flow through group membership.
Bootstrap, seed, OIDC, and admin handlers sync group membership on
role changes. Demotion/deletion safeguards use group member count.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
remove token budgets + allowed models from groups
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 5s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m12s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m45s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m18s
Details
e8e45184f7 
Provider-era cruft: token_budget_daily, token_budget_monthly, and
allowed_models columns removed from groups table (both dialects).
ResolveTokenBudget() and ResolveModelAllowlist() deleted. GroupPatch
trimmed to name/description/permissions. Admin groups UI simplified
to permissions-only. -283 lines.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
drop users.role column: full RBAC through group membership
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 5s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m22s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m35s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m18s
Details
b10f5bee05 
The role column was a pre-RBAC artifact. All authorization now flows
through explicit group membership and permission grants:

- Everyone group: all users added on creation (no implicit membership)
- Admins group: grants surface.admin.access + all platform permissions
- JWT claims, login response, profile: role field removed
- OIDC: isIdPAdmin() maps IdP claims → Admins group (no role writes)
- Admin UI: role dropdown removed, admin managed through groups
- Middleware cache simplified to isActive only

28 files changed, -79 lines net. Zero magic roles.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
update turnover doc for v0.2.0 PR 1
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 3s
Details
CI/CD / test-sqlite (pull_request) Has been skipped
Details
CI/CD / test-go-pg (pull_request) Has been skipped
Details
CI/CD / test-frontend (pull_request) Has been skipped
Details
CI/CD / build-and-deploy (pull_request) Has been skipped
Details
4235e9e023 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
xcaliber merged commit a830ae3684 into main 2026-03-26 17:32:32 +00:00
xcaliber deleted branch feat/admin-rbac-migration 2026-03-26 17:32:32 +00:00
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
xcaliber
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: switchboard/core#2
Delete Branch "feat/admin-rbac-migration"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?