Add hierarchical View policy administration

This commit is contained in:
2026-08-04 08:21:49 +02:00
parent 86c95f85bb
commit fc6d333a64
7 changed files with 682 additions and 0 deletions
+7
View File
@@ -12,6 +12,13 @@ user retention sections through the shared `admin.sections` UI capability. The
admin shell does not render retention policy panels unless this module is
installed and enabled.
The same administration contribution exposes hierarchical **View policy** at
system, tenant, group, and user scope. Administrators can inherit, allow, or
block View use, selection, assignment, editing, derivation, and workflow
activation. Optional View-ID and surface-ID ceilings are intersected across the
scope path, and the UI displays effective limits and provenance. Lower scopes
can narrow but never broaden an ancestor restriction.
Policy decision and provenance payloads use the shared kernel DTOs documented
in [docs/POLICY_DECISION_PROVENANCE.md](docs/POLICY_DECISION_PROVENANCE.md)
and `/mnt/DATA/git/govoplan-core/docs/POLICY_CONTRACTS.md`.