feat(idm): administer typed identity relationships
Module Package Release / publish-packages (push) Successful in 12s

This commit is contained in:
2026-08-21 22:04:06 +02:00
parent 65ff14a613
commit b0eda35195
15 changed files with 1590 additions and 36 deletions
+206 -4
View File
@@ -31,7 +31,7 @@ export const generatedTranslations: PlatformTranslations = {
"i18n:govoplan-idm.governance.b989a277": "governance",
"i18n:govoplan-idm.identity.544a8347": "Identity",
"i18n:govoplan-idm.identity_is_required.6ad4ee23": "Identity is required.",
"i18n:govoplan-idm.identity_links_intro.45fed9dd": "Link identities to organization functions. Organizations defines the functions; IDM owns who holds them.",
"i18n:govoplan-idm.identity_links_intro.45fed9dd": "Manage organization-function assignments, typed business groups, and effective identity relationships. IDM records institutional facts; Access evaluates application authority separately.",
"i18n:govoplan-idm.identity_lookup_unavailable.b76f7714": "Identity lookup is unavailable.",
"i18n:govoplan-idm.identity_search.d3460fcf": "Identity search",
"i18n:govoplan-idm.idm_governance.6e4f3251": "IDM governance",
@@ -151,7 +151,108 @@ export const generatedTranslations: PlatformTranslations = {
"History": "History",
"Confirm function decision": "Confirm function decision",
"Confirm": "Confirm",
"None": "None"
"None": "None",
"i18n:govoplan-idm.edit_group_value": "Edit {value0}",
"i18n:govoplan-idm.inspect_memberships_value": "Inspect memberships for {value0}",
"i18n:govoplan-idm.effective_memberships_value": "Effective memberships: {value0}",
"i18n:govoplan-idm.memberships_resolved_summary": "Resolved at {value0}. {value1} identities are effective; excluded decisions remain visible for explanation.",
"i18n:govoplan-idm.group_revision_help": "Revision {value0} is used for optimistic concurrency. If another administrator saves first, reload before applying your change.",
"i18n:govoplan-idm.relationship_revision_help": "Revision {value0} is used for optimistic concurrency. The subject identity is immutable; replace the relationship if the subject is wrong.",
"Access role assignments": "Access role assignments",
"Active": "Active",
"An Access or tenant administrator": "An Access or tenant administrator",
"Ask for typed-relationship read permission.": "Ask for typed-relationship read permission.",
"Ask for typed-relationship write permission before creating, editing, or revoking records.": "Ask for typed-relationship write permission before creating, editing, or revoking records.",
"Business membership is an institutional fact. It does not grant application permissions; Access evaluates authority separately.": "Business membership is an institutional fact. It does not grant application permissions; Access evaluates authority separately.",
"Create an active typed group first.": "Create an active typed group first.",
"Create identity relationship": "Create identity relationship",
"Create relationship": "Create relationship",
"Create typed group": "Create typed group",
"Description": "Description",
"Destination": "Destination",
"Edit identity relationship": "Edit identity relationship",
"Edit relationship": "Edit relationship",
"Edit typed group": "Edit typed group",
"Effective at": "Effective at",
"Effective identity relationships": "Effective identity relationships",
"Effective memberships": "Effective memberships",
"Effective state": "Effective state",
"Effective window": "Effective window",
"Enter a valid date and time.": "Enter a valid date and time.",
"Expired": "Expired",
"Future": "Future",
"Future dates schedule the fact without granting current membership. Expiry and revocation remove it from effective resolution while retaining source and decision evidence. Membership never grants Access permissions by itself.": "Future dates schedule the fact without granting current membership. Expiry and revocation remove it from effective resolution while retaining source and decision evidence. Membership never grants Access permissions by itself.",
"Group type": "Group type",
"Identity": "Identity",
"Identity reference": "Identity reference",
"Identity relationship created.": "Identity relationship created.",
"Identity relationship revoked. Effective membership and downstream business resolution stop immediately.": "Identity relationship revoked. Effective membership and downstream business resolution stop immediately.",
"Identity relationship updated.": "Identity relationship updated.",
"Identity state": "Identity state",
"Inactive": "Inactive",
"Key": "Key",
"Loading typed groups and relationships": "Loading typed groups and relationships",
"Name": "Name",
"No end limit": "No end limit",
"No identity relationships found.": "No identity relationships found.",
"No membership relationships were evaluated.": "No membership relationships were evaluated.",
"No start limit": "No start limit",
"No typed groups found.": "No typed groups found.",
"Not available": "Not available",
"Properties (JSON object)": "Properties (JSON object)",
"Properties must be a JSON object.": "Properties must be a JSON object.",
"Properties must contain valid JSON.": "Properties must contain valid JSON.",
"Provenance (JSON object)": "Provenance (JSON object)",
"Provenance must be a JSON object.": "Provenance must be a JSON object.",
"Provenance must contain valid JSON.": "Provenance must contain valid JSON.",
"Related identity": "Related identity",
"Reload": "Reload",
"Relationship": "Relationship",
"Relationship kind": "Relationship kind",
"Relationship kinds": "Relationship kinds",
"Relationship write permission is required.": "Relationship write permission is required.",
"Required action": "Required action",
"Resolution": "Resolution",
"Resolve memberships": "Resolve memberships",
"Resolving effective memberships": "Resolving effective memberships",
"Responsible actor": "Responsible actor",
"Revision": "Revision",
"Revocation reason": "Revocation reason",
"Revocation takes effect immediately for membership resolution and downstream business consumers. The record, actor, time, source, and reason remain as evidence; a revoked relationship cannot be edited or reactivated.": "Revocation takes effect immediately for membership resolution and downstream business consumers. The record, actor, time, source, and reason remain as evidence; a revoked relationship cannot be edited or reactivated.",
"Revoke identity relationship": "Revoke identity relationship",
"Revoke relationship": "Revoke relationship",
"Revoked": "Revoked",
"Revoked relationships are retained as immutable evidence.": "Revoked relationships are retained as immutable evidence.",
"Revoking...": "Revoking...",
"Role": "Role",
"Save group": "Save group",
"Save or discard the typed-group or relationship draft before leaving this surface.": "Save or discard the typed-group or relationship draft before leaving this surface.",
"Save relationship": "Save relationship",
"Saving...": "Saving...",
"Search identities": "Search identities",
"Search typed groups": "Search typed groups",
"Show inactive groups": "Show inactive groups",
"Show revoked relationships": "Show revoked relationships",
"Source": "Source",
"Source provider": "Source provider",
"Source resource ID": "Source resource ID",
"Source resource type": "Source resource type",
"Source revision": "Source revision",
"Status": "Status",
"Subject identity": "Subject identity",
"Target": "Target",
"Target group": "Target group",
"Target type": "Target type",
"Target typed group": "Target typed group",
"Typed group": "Typed group",
"Typed group created.": "Typed group created.",
"Typed group updated.": "Typed group updated.",
"Typed groups": "Typed groups",
"Typed groups and identity relationships": "Typed groups and identity relationships",
"Typed-group write permission is required.": "Typed-group write permission is required.",
"Unsaved relationship administration": "Unsaved relationship administration",
"You do not have permission to view typed identity relationships.": "You do not have permission to view typed identity relationships.",
"You may inspect relationship evidence but not change it.": "You may inspect relationship evidence but not change it."
},
de: {
"i18n:govoplan-idm.account.2b2936f8": "Konto",
@@ -183,7 +284,7 @@ export const generatedTranslations: PlatformTranslations = {
"i18n:govoplan-idm.governance.b989a277": "Governance",
"i18n:govoplan-idm.identity.544a8347": "Identität",
"i18n:govoplan-idm.identity_is_required.6ad4ee23": "Identität ist erforderlich.",
"i18n:govoplan-idm.identity_links_intro.45fed9dd": "Verknüpfe Identitäten mit Organisationsfunktionen. Organisationen definiert die Funktionen; IDM verwaltet, wer sie innehat.",
"i18n:govoplan-idm.identity_links_intro.45fed9dd": "Verwalten Sie Organisationsfunktionszuordnungen, typisierte Fachgruppen und zeitlich wirksame Identitätsbeziehungen. IDM erfasst institutionelle Tatsachen; Access bewertet Anwendungsbefugnisse getrennt.",
"i18n:govoplan-idm.identity_lookup_unavailable.b76f7714": "Identitätssuche ist nicht verfügbar.",
"i18n:govoplan-idm.identity_search.d3460fcf": "Identitätssuche",
"i18n:govoplan-idm.idm_governance.6e4f3251": "IDM-Governance",
@@ -303,6 +404,107 @@ export const generatedTranslations: PlatformTranslations = {
"History": "Verlauf",
"Confirm function decision": "Funktionsentscheidung bestätigen",
"Confirm": "Bestätigen",
"None": "Keine"
"None": "Keine",
"i18n:govoplan-idm.edit_group_value": "{value0} bearbeiten",
"i18n:govoplan-idm.inspect_memberships_value": "Mitgliedschaften von {value0} prüfen",
"i18n:govoplan-idm.effective_memberships_value": "Wirksame Mitgliedschaften: {value0}",
"i18n:govoplan-idm.memberships_resolved_summary": "Aufgelöst zum Zeitpunkt {value0}. {value1} Identitäten sind wirksam; ausgeschlossene Entscheidungen bleiben zur Erläuterung sichtbar.",
"i18n:govoplan-idm.group_revision_help": "Revision {value0} schützt vor dem Überschreiben paralleler Änderungen. Falls eine andere Administration zuerst speichert, laden Sie vor Ihrer Änderung neu.",
"i18n:govoplan-idm.relationship_revision_help": "Revision {value0} schützt vor dem Überschreiben paralleler Änderungen. Die Ausgangsidentität ist unveränderbar; ersetzen Sie die Beziehung, wenn sie falsch ist.",
"Access role assignments": "Zuweisungen von Zugriffsrollen",
"Active": "Aktiv",
"An Access or tenant administrator": "Access- oder Mandantenadministration",
"Ask for typed-relationship read permission.": "Fordern Sie die Leseberechtigung für typisierte Beziehungen an.",
"Ask for typed-relationship write permission before creating, editing, or revoking records.": "Fordern Sie vor dem Erstellen, Bearbeiten oder Widerrufen die Schreibberechtigung für typisierte Beziehungen an.",
"Business membership is an institutional fact. It does not grant application permissions; Access evaluates authority separately.": "Eine fachliche Mitgliedschaft ist eine institutionelle Tatsache. Sie erteilt keine Anwendungsberechtigungen; Access bewertet Befugnisse getrennt.",
"Create an active typed group first.": "Erstellen Sie zuerst eine aktive typisierte Gruppe.",
"Create identity relationship": "Identitätsbeziehung erstellen",
"Create relationship": "Beziehung erstellen",
"Create typed group": "Typisierte Gruppe erstellen",
"Description": "Beschreibung",
"Destination": "Ziel",
"Edit identity relationship": "Identitätsbeziehung bearbeiten",
"Edit relationship": "Beziehung bearbeiten",
"Edit typed group": "Typisierte Gruppe bearbeiten",
"Effective at": "Wirksam zum Zeitpunkt",
"Effective identity relationships": "Wirksame Identitätsbeziehungen",
"Effective memberships": "Wirksame Mitgliedschaften",
"Effective state": "Wirksamkeitsstatus",
"Effective window": "Wirksamkeitszeitraum",
"Enter a valid date and time.": "Geben Sie ein gültiges Datum mit Uhrzeit ein.",
"Expired": "Abgelaufen",
"Future": "Zukünftig",
"Future dates schedule the fact without granting current membership. Expiry and revocation remove it from effective resolution while retaining source and decision evidence. Membership never grants Access permissions by itself.": "Ein zukünftiger Beginn plant die Tatsache, ohne eine aktuelle Mitgliedschaft zu erzeugen. Ablauf und Widerruf entfernen sie aus der wirksamen Auflösung, während Quellen- und Entscheidungsnachweise erhalten bleiben. Eine Mitgliedschaft erteilt niemals selbstständig Access-Berechtigungen.",
"Group type": "Gruppentyp",
"Identity": "Identität",
"Identity reference": "Identitätsreferenz",
"Identity relationship created.": "Identitätsbeziehung erstellt.",
"Identity relationship revoked. Effective membership and downstream business resolution stop immediately.": "Identitätsbeziehung widerrufen. Wirksame Mitgliedschaft und nachgelagerte fachliche Auflösungen enden sofort.",
"Identity relationship updated.": "Identitätsbeziehung aktualisiert.",
"Identity state": "Identitätsstatus",
"Inactive": "Inaktiv",
"Key": "Schlüssel",
"Loading typed groups and relationships": "Typisierte Gruppen und Beziehungen werden geladen",
"Name": "Name",
"No end limit": "Kein Endzeitpunkt",
"No identity relationships found.": "Keine Identitätsbeziehungen gefunden.",
"No membership relationships were evaluated.": "Es wurden keine Mitgliedschaftsbeziehungen ausgewertet.",
"No start limit": "Kein Startzeitpunkt",
"No typed groups found.": "Keine typisierten Gruppen gefunden.",
"Not available": "Nicht verfügbar",
"Properties (JSON object)": "Eigenschaften (JSON-Objekt)",
"Properties must be a JSON object.": "Eigenschaften müssen ein JSON-Objekt sein.",
"Properties must contain valid JSON.": "Eigenschaften müssen gültiges JSON enthalten.",
"Provenance (JSON object)": "Herkunftsnachweis (JSON-Objekt)",
"Provenance must be a JSON object.": "Der Herkunftsnachweis muss ein JSON-Objekt sein.",
"Provenance must contain valid JSON.": "Der Herkunftsnachweis muss gültiges JSON enthalten.",
"Related identity": "Verknüpfte Identität",
"Reload": "Neu laden",
"Relationship": "Beziehung",
"Relationship kind": "Beziehungsart",
"Relationship kinds": "Beziehungsarten",
"Relationship write permission is required.": "Die Schreibberechtigung für Beziehungen ist erforderlich.",
"Required action": "Erforderliche Aktion",
"Resolution": "Auflösung",
"Resolve memberships": "Mitgliedschaften auflösen",
"Resolving effective memberships": "Wirksame Mitgliedschaften werden aufgelöst",
"Responsible actor": "Verantwortliche Stelle",
"Revision": "Revision",
"Revocation reason": "Widerrufsgrund",
"Revocation takes effect immediately for membership resolution and downstream business consumers. The record, actor, time, source, and reason remain as evidence; a revoked relationship cannot be edited or reactivated.": "Der Widerruf wirkt sofort auf die Mitgliedschaftsauflösung und nachgelagerte fachliche Verbraucher. Datensatz, handelnde Person, Zeitpunkt, Quelle und Grund bleiben als Nachweis erhalten; eine widerrufene Beziehung kann weder bearbeitet noch reaktiviert werden.",
"Revoke identity relationship": "Identitätsbeziehung widerrufen",
"Revoke relationship": "Beziehung widerrufen",
"Revoked": "Widerrufen",
"Revoked relationships are retained as immutable evidence.": "Widerrufene Beziehungen bleiben als unveränderbarer Nachweis erhalten.",
"Revoking...": "Wird widerrufen …",
"Role": "Rolle",
"Save group": "Gruppe speichern",
"Save or discard the typed-group or relationship draft before leaving this surface.": "Speichern oder verwerfen Sie den Entwurf der typisierten Gruppe oder Beziehung, bevor Sie diesen Bereich verlassen.",
"Save relationship": "Beziehung speichern",
"Saving...": "Wird gespeichert …",
"Search identities": "Identitäten durchsuchen",
"Search typed groups": "Typisierte Gruppen durchsuchen",
"Show inactive groups": "Inaktive Gruppen anzeigen",
"Show revoked relationships": "Widerrufene Beziehungen anzeigen",
"Source": "Quelle",
"Source provider": "Quellanbieter",
"Source resource ID": "Quellressourcen-ID",
"Source resource type": "Quellressourcentyp",
"Source revision": "Quellrevision",
"Status": "Status",
"Subject identity": "Ausgangsidentität",
"Target": "Ziel",
"Target group": "Zielgruppe",
"Target type": "Zielart",
"Target typed group": "Typisierte Zielgruppe",
"Typed group": "Typisierte Gruppe",
"Typed group created.": "Typisierte Gruppe erstellt.",
"Typed group updated.": "Typisierte Gruppe aktualisiert.",
"Typed groups": "Typisierte Gruppen",
"Typed groups and identity relationships": "Typisierte Gruppen und Identitätsbeziehungen",
"Typed-group write permission is required.": "Die Schreibberechtigung für typisierte Gruppen ist erforderlich.",
"Unsaved relationship administration": "Ungespeicherte Beziehungsverwaltung",
"You do not have permission to view typed identity relationships.": "Sie haben keine Berechtigung, typisierte Identitätsbeziehungen anzuzeigen.",
"You may inspect relationship evidence but not change it.": "Sie können Beziehungsnachweise prüfen, aber nicht ändern."
}
};