feat(files): add safe connector space removal

This commit is contained in:
2026-08-19 23:25:43 +02:00
parent e1361427b8
commit a9c7a7a40c
7 changed files with 149 additions and 1 deletions
+3 -1
View File
@@ -1096,7 +1096,8 @@ manifest = ModuleManifest(
summary="Keep endpoint profiles, reusable credentials, and inherited connector policy separate, and understand what DELETE removes immediately.",
body=(
"System, tenant, and one user/group/campaign leaf form the effective policy chain: deny rules win and every configured allow rule must match. "
"Responses redact secret values and deployment references. Deleting a database-managed credential or profile immediately scrubs Files-owned encrypted material and private metadata in the same transaction as a non-secret audit event; dependent profiles are disabled, while legacy non-owned references are only detached and audited."
"Responses redact secret values and deployment references. Deleting a database-managed credential or profile immediately scrubs Files-owned encrypted material and private metadata in the same transaction as a non-secret audit event; dependent profiles are disabled, while legacy non-owned references are only detached and audited. "
"Removing a connector space is a separate owner-authorized operation: it retires only the local virtual-space link and leaves provider content, imported managed files and shares, profiles, credentials, and remote references untouched. Intrinsic user and group managed spaces cannot be removed."
),
layer="configured",
documentation_types=("admin",),
@@ -1166,6 +1167,7 @@ manifest = ModuleManifest(
"New API-managed external secret references fail closed until Files can prove ownership and provider-side deletion.",
"Deletion and destructive retirement scrub Files-owned encrypted connector material before completion and emit non-secret audit evidence.",
"Legacy non-owned external references are detached and audited, never sent to an arbitrary provider delete operation.",
"Connector-space removal is local and soft; it never claims to delete remote or previously imported managed content.",
],
"related_topic_ids": [
"files.workflow.import-managed-snapshot",