61 lines
2.7 KiB
Markdown
61 lines
2.7 KiB
Markdown
# Wiki Domain Boundary
|
|
|
|
## Owns
|
|
|
|
- tenant knowledge spaces
|
|
- page identity, hierarchy, links, labels, and aliases
|
|
- immutable page revisions and current revision selection
|
|
- draft, review, published, archived, and redirected states
|
|
- page-level access and publishing rules
|
|
- references to attachments and related GovOPlaN resources
|
|
|
|
## Does Not Own
|
|
|
|
- binary storage or collaborative office-document editing
|
|
- product and instance documentation, owned by Docs
|
|
- formal records, legal holds, and retention
|
|
- workflow execution, tasks, tickets, projects, or cases
|
|
- external MediaWiki/BlueSpice transport
|
|
|
|
## Integrations
|
|
|
|
Files/DMS provides attachment references. Records can capture a published page
|
|
revision as evidence. Search indexes only revisions the principal may
|
|
discover. Projects, Tickets, and Cases may link pages as living knowledge.
|
|
Connectors owns MediaWiki/BlueSpice discovery, synchronization, and migration.
|
|
|
|
## Governed Vertical Slice
|
|
|
|
The native slice stores a current editorial projection plus an immutable page
|
|
revision for every creation, edit, publication, redirect, or archive action.
|
|
Writes require the expected revision and an idempotency key. A published page
|
|
can gain a later draft without withdrawing its last published revision from
|
|
readers or Search.
|
|
|
|
Visibility is either tenant-wide or restricted to exact account, identity,
|
|
membership, group, role, or function-assignment tokens. Pages inherit their
|
|
space access by default and may define an explicit override. Permissions remain
|
|
distinct for reading, editing, commenting, publishing, and space
|
|
administration, and are checked again at each service action.
|
|
|
|
Typed links retain the owner module and stable resource identity. Attachment
|
|
links can target Files or DMS only; no binary bytes are copied into Wiki.
|
|
External provenance can be recorded without claiming transport authority.
|
|
|
|
Search receives only the last published revision, effective visibility, and
|
|
ACL tokens, and rechecks every result against current Wiki state. Drafts and
|
|
archives never become searchable documents. DSAR discovery matches exact
|
|
subject identifiers in ACL membership, actor attribution, and the subject's
|
|
own comments. Minimization remains a manual knowledge-owner and retention
|
|
decision.
|
|
|
|
## Current Limits
|
|
|
|
- external MediaWiki or BlueSpice discovery, credentials, migration execution,
|
|
synchronization, and reconciliation require a Connectors provider
|
|
- the initial editor stores governed plain text; rich-text editing and presence
|
|
awareness can be layered over the same revision contract later
|
|
- a page with active child pages must have those children moved or archived
|
|
before its path changes or it is archived, preventing silent descendant path
|
|
drift
|