Add hierarchical View policy administration
This commit is contained in:
@@ -12,6 +12,13 @@ user retention sections through the shared `admin.sections` UI capability. The
|
||||
admin shell does not render retention policy panels unless this module is
|
||||
installed and enabled.
|
||||
|
||||
The same administration contribution exposes hierarchical **View policy** at
|
||||
system, tenant, group, and user scope. Administrators can inherit, allow, or
|
||||
block View use, selection, assignment, editing, derivation, and workflow
|
||||
activation. Optional View-ID and surface-ID ceilings are intersected across the
|
||||
scope path, and the UI displays effective limits and provenance. Lower scopes
|
||||
can narrow but never broaden an ancestor restriction.
|
||||
|
||||
Policy decision and provenance payloads use the shared kernel DTOs documented
|
||||
in [docs/POLICY_DECISION_PROVENANCE.md](docs/POLICY_DECISION_PROVENANCE.md)
|
||||
and `/mnt/DATA/git/govoplan-core/docs/POLICY_CONTRACTS.md`.
|
||||
|
||||
Reference in New Issue
Block a user