Add semantic access admin WebUI and acting-in-place context selector #10

New Issue

zemion · 2026-07-10T10:25:13+02:00

zemion commented

2026-07-10 10:25:13 +02:00

Backend semantic access storage, APIs, principal population, and capabilities are now in place.

Follow-up scope:

Add WebUI panels for identities, organization units, functions, function assignments, and function delegations.
Add an explicit acting-in-place context selector so act_in_place delegation facts can be selected intentionally at runtime.
Surface access.explanation provenance in the admin UI and, later, postbox/workflow/portal/audit consumer screens.

This is intentionally separate from the backend contract/storage/API foundation so acting in place does not silently grant permissions without a selected context.

Backend semantic access storage, APIs, principal population, and capabilities are now in place. Follow-up scope: - Add WebUI panels for identities, organization units, functions, function assignments, and function delegations. - Add an explicit acting-in-place context selector so `act_in_place` delegation facts can be selected intentionally at runtime. - Surface `access.explanation` provenance in the admin UI and, later, postbox/workflow/portal/audit consumer screens. This is intentionally separate from the backend contract/storage/API foundation so acting in place does not silently grant permissions without a selected context.

zemion commented

2026-07-11 00:56:28 +02:00

Codex State: progress

Summary

Backend semantic access storage, external function role mappings, and explanation provenance are in place.
Organizations and IDM now deep-link into their editors; Access role-source rows can link to IDM assignments and organization functions.

Verification

unittest tests.test_access_contracts.AccessContractTests: 13 OK in previous focused run; combined org/idm/access run: 23 OK

Next / Blocked

Still open: dedicated semantic access admin panels and explicit acting-in-place context selection at runtime.

Suggested status label: status/in-progress

## Codex State: progress ### Summary - Backend semantic access storage, external function role mappings, and explanation provenance are in place. - Organizations and IDM now deep-link into their editors; Access role-source rows can link to IDM assignments and organization functions. ### Verification - `unittest tests.test_access_contracts.AccessContractTests: 13 OK in previous focused run; combined org/idm/access run: 23 OK` ### Next / Blocked - Still open: dedicated semantic access admin panels and explicit acting-in-place context selection at runtime. Suggested status label: `status/in-progress`

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: add-ideas/govoplan-access#10