feat(policy): resolve scheduling participant privacy
This commit is contained in:
@@ -20,3 +20,12 @@ Hierarchical policy evaluation, delegation ceilings, and write simulations are
|
||||
implemented in `govoplan_policy.backend.hierarchy`. Privacy retention uses that
|
||||
shared helper and exposes `/api/v1/admin/privacy-retention/policies/{scope}/simulate`
|
||||
for preflight checks before saving lower-level policy changes.
|
||||
|
||||
The module also provides the optional
|
||||
`policy.schedulingParticipantPrivacy` capability. Scheduling owns each
|
||||
request's participant-visibility setting; Policy can only preserve or narrow
|
||||
it. The resolver reads an optional `maximum_visibility` ceiling from the
|
||||
`scheduling_participant_privacy_policy` object in system and tenant settings.
|
||||
Missing policy is unrestricted, while malformed explicit policy fails closed
|
||||
to aggregate-only visibility. This resolver slice intentionally has no policy
|
||||
management endpoint or UI yet.
|
||||
|
||||
Reference in New Issue
Block a user