From 0883938a1740271bc677220f740d3eac04632f57 Mon Sep 17 00:00:00 2001 From: zemion Date: Mon, 6 Jul 2026 20:31:09 +0200 Subject: [PATCH] Sync Repo-docs-ACCESS-EXTRACTION-PLAN from project files --- Repo-docs-ACCESS-EXTRACTION-PLAN.-.md | 27 +++++++++++++++++++++------ 1 file changed, 21 insertions(+), 6 deletions(-) diff --git a/Repo-docs-ACCESS-EXTRACTION-PLAN.-.md b/Repo-docs-ACCESS-EXTRACTION-PLAN.-.md index 731313e..efc1df1 100644 --- a/Repo-docs-ACCESS-EXTRACTION-PLAN.-.md +++ b/Repo-docs-ACCESS-EXTRACTION-PLAN.-.md @@ -1,4 +1,4 @@ - + > Mirrored from `/mnt/DATA/git/govoplan-core/docs/ACCESS_EXTRACTION_PLAN.md`. > Origin: `repository`. @@ -349,8 +349,20 @@ Acceptance criteria: - [x] Add access capability registry names. - [x] Register live access directory and tenant resolver capability implementations backed by the current compatibility tables. +- [x] Register an access tenant-provisioner capability so tenancy can seed + access-owned default roles without importing access service internals. - [x] Replace `govoplan-files` direct user/group/tenant model imports with the `access.directory` capability for group membership and share-target checks. +- [x] Replace `govoplan-files` direct campaign model imports with the + `campaigns.access` capability for campaign share/existence checks. +- [x] Replace `govoplan-mail` direct user/group/tenant model imports with + mail-owned policy storage plus access-directory validation and legacy-read + fallback. +- [x] Replace `govoplan-mail` direct campaign model imports with the + `campaigns.mailPolicyContext` capability for campaign-scoped mail policy and + owner context. +- [x] Replace `govoplan-campaign` runtime user/group/tenant model imports with + access-directory lookups and string-based ORM relationships. - [x] Create `govoplan-access` repository workspace and issue workflow scaffold. - [x] Create `govoplan-access` repository/package skeleton. - [x] Move `govoplan_core/access` seed package into `govoplan-access`. @@ -373,16 +385,19 @@ Acceptance criteria: - [ ] Move legacy admin service and model ownership out of the access compatibility implementation into access, tenancy, policy, audit, and core settings modules. -- [ ] Replace tenancy-to-access default role seeding with a tenant-created - lifecycle/event contract. -- [ ] Replace feature-module direct user/group/tenant model imports. +- [x] Replace tenancy-to-access default role seeding with an access + tenant-provisioner capability. +- [x] Replace feature-module direct user/group/tenant model imports. - [x] `govoplan-files` - - [ ] `govoplan-mail` - - [ ] `govoplan-campaign` + - [x] `govoplan-mail` + - [x] `govoplan-campaign` - [ ] Replace direct cross-module SQL lookups with provider/event contracts. - [ ] Move access admin WebUI pages to module route contributions. - [ ] Remove transitional boundary checker allowlist entries as each contract lands. +- [ ] Move campaign-scoped mail policy ownership fully behind an API/event + workflow if direct synchronous capability calls become too tight for later + deployment boundaries. ## Open Decisions