[Feature] Add typed groups and effective relationship administration UI #11

New Issue

2026-08-03T01:53:55+02:00

zemion commented

2026-08-03 01:53:55 +02:00

Objective

Expose the implemented typed-group and effective-dated identity-relationship contracts in IDM administration rather than leaving the documented model API-only.

Acceptance criteria

Authorized administrators can list, create, and edit typed groups.
Authorized administrators can list, create, edit, and revoke effective-dated relationships with provenance and lifecycle explanations.
Effective group membership is inspectable through the existing membership-resolution endpoint.
Identity, group, and relationship references use searchable selectors rather than raw ids.
Future, active, expired, and revoked states are distinct and access permissions remain separate from business membership.
User/admin documentation and focused permission/lifecycle/UI tests are included.

Follow-up to #7; discovered by the enforced platform endpoint-surface inventory.

## Objective Expose the implemented typed-group and effective-dated identity-relationship contracts in IDM administration rather than leaving the documented model API-only. ## Acceptance criteria - Authorized administrators can list, create, and edit typed groups. - Authorized administrators can list, create, edit, and revoke effective-dated relationships with provenance and lifecycle explanations. - Effective group membership is inspectable through the existing membership-resolution endpoint. - Identity, group, and relationship references use searchable selectors rather than raw ids. - Future, active, expired, and revoked states are distinct and access permissions remain separate from business membership. - User/admin documentation and focused permission/lifecycle/UI tests are included. Follow-up to #7; discovered by the enforced platform endpoint-surface inventory.

zemion added the module/idm area/governance

labels 2026-08-03 01:53:55 +02:00

zemion commented

2026-08-21 22:29:07 +02:00

Completed and released.

Implemented:

Typed-group administration now supports listing, creating, editing, active/inactive visibility, optimistic revisions, metadata, and provenance.
Effective relationships now support listing, creating, editing, and explicitly confirmed revocation with a mandatory reason.
Future, active, expired, and revoked lifecycle states are visually distinct.
Identity and group references use searchable selectors; broad identity search remains limited to relationship writers.
The membership inspector resolves a group at a selected time and displays included and excluded decisions with reason codes and identity lifecycle evidence.
Deep links, dirty-state protection, read-only blockers, separated destructive actions, German translations, exact field help, and administrator documentation are included.

Release chain:

govoplan-idm b0eda35, tag v0.1.19
govoplan-core 1d9b677, tag v0.1.22
govoplan workspace b6452c6

Verification:

IDM: 40 Python tests and 19 structural subtests passed; Ruff and WebUI interface contracts passed.
Workspace focused gate passed in full: 68 manifests, dependency boundaries, backend suites, 59 WebUI permutations, full-product production build, bundle budgets, and 8 Playwright conformance tests.
Platform inventory remains complete at 1,619/1,619 field help contexts with zero duplicate IDs and complete German reference-locale coverage.
All eight typed-group and relationship endpoints moved from missing_ui to ui_reachable; overall missing_ui count fell from 18 to 10.

No operator migration or product decision is required for this slice.

Completed and released. Implemented: - Typed-group administration now supports listing, creating, editing, active/inactive visibility, optimistic revisions, metadata, and provenance. - Effective relationships now support listing, creating, editing, and explicitly confirmed revocation with a mandatory reason. - Future, active, expired, and revoked lifecycle states are visually distinct. - Identity and group references use searchable selectors; broad identity search remains limited to relationship writers. - The membership inspector resolves a group at a selected time and displays included and excluded decisions with reason codes and identity lifecycle evidence. - Deep links, dirty-state protection, read-only blockers, separated destructive actions, German translations, exact field help, and administrator documentation are included. Release chain: - govoplan-idm b0eda35, tag v0.1.19 - govoplan-core 1d9b677, tag v0.1.22 - govoplan workspace b6452c6 Verification: - IDM: 40 Python tests and 19 structural subtests passed; Ruff and WebUI interface contracts passed. - Workspace focused gate passed in full: 68 manifests, dependency boundaries, backend suites, 59 WebUI permutations, full-product production build, bundle budgets, and 8 Playwright conformance tests. - Platform inventory remains complete at 1,619/1,619 field help contexts with zero duplicate IDs and complete German reference-locale coverage. - All eight typed-group and relationship endpoints moved from missing_ui to ui_reachable; overall missing_ui count fell from 18 to 10. No operator migration or product decision is required for this slice.

zemion removed the

status

ready

codex/ready labels 2026-08-21 22:29:07 +02:00

zemion closed this issue

2026-08-21 22:29:08 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-idm#11