From fda99d40eb7d938c9d1baf70edf81fa76eebb7da Mon Sep 17 00:00:00 2001 From: Albrecht Degering Date: Tue, 21 Jul 2026 15:46:55 +0200 Subject: [PATCH] docs: clarify institutional identity ownership --- docs/GOVOPLAN_MASTER_ROADMAP.md | 16 ++++++++++++---- 1 file changed, 12 insertions(+), 4 deletions(-) diff --git a/docs/GOVOPLAN_MASTER_ROADMAP.md b/docs/GOVOPLAN_MASTER_ROADMAP.md index cae001a..83709a1 100644 --- a/docs/GOVOPLAN_MASTER_ROADMAP.md +++ b/docs/GOVOPLAN_MASTER_ROADMAP.md @@ -149,11 +149,15 @@ pattern exists. | Internal work queues and tasks | `govoplan-tasks` | | Appointment proposals and booking | `govoplan-appointments`, `govoplan-calendar` | | Postbox, email, and notifications | `govoplan-postbox`, `govoplan-mail`, `govoplan-notifications` | +| Canonical subjects and account links | `govoplan-identity` | +| Organizational structures, units, and functions | `govoplan-organizations` | +| Identity-to-function assignments and directory synchronization | `govoplan-idm` | | Identity trust, device keys, and encrypted postbox key contracts | `govoplan-identity-trust`, `govoplan-access`, `govoplan-postbox` | | Service directory/catalog | `govoplan-portal` | | Permit/document generation | `govoplan-templates`, `govoplan-dms` | | Payment capture and accounting handoff | `govoplan-payments`, `govoplan-ledger` | -| Roles, permissions, tenants, policy, audit | `govoplan-access`, `govoplan-tenancy`, `govoplan-policy`, `govoplan-audit` | +| Authentication projection, roles, permissions, acting context | `govoplan-access` | +| Tenants, policy, and audit | `govoplan-tenancy`, `govoplan-policy`, `govoplan-audit` | | External software integration | `govoplan-connectors` | | Recurring extraction and transformation | possible future `govoplan-datasources`, possible future `govoplan-dataflow` | | Reports, BI, and management visibility | `govoplan-reporting` | @@ -285,9 +289,13 @@ Refine: - `govoplan-core`: module discovery, capabilities, events, migrations, release catalog, configuration package runtime, WebUI shell. -- `govoplan-access`: identities, sessions, API keys, users, groups, roles, - memberships, function assignments, delegation, RBAC decisions. -- `govoplan-tenancy`: tenant and organizational-unit boundaries. +- `govoplan-identity`: canonical identities and account links. +- `govoplan-organizations`: organizational structures, units, and functions. +- `govoplan-idm`: identity-to-function assignments, directory synchronization, + preview, conflicts, and reconciliation. +- `govoplan-access`: sessions, API keys, users, groups, roles, memberships, + function-to-role projection, delegation, acting context, and RBAC decisions. +- `govoplan-tenancy`: tenant lifecycle and tenant boundaries. - `govoplan-identity-trust`: initial trust contracts for device keys, public key directory, assurance, and later encrypted postbox key access. - `govoplan-policy`: policy sources, policy decisions, retention inputs.