40 lines
1.1 KiB
Markdown
40 lines
1.1 KiB
Markdown
# GovOPlaN Identity
|
|
|
|
`govoplan-identity` is the canonical identity directory module for GovOPlaN.
|
|
|
|
It owns identities and links between identities and platform accounts. This is
|
|
separate from IDM connectors and from access control.
|
|
|
|
## Boundary
|
|
|
|
Identity owns:
|
|
|
|
- identity records for people, services, and other internal subjects
|
|
- account links for identities that can use multiple accounts
|
|
- primary account selection for display and explainability
|
|
- accepted normalized identity facts after import or manual administration
|
|
|
|
Identity does not own:
|
|
|
|
- password authentication, sessions, API keys, or CSRF
|
|
- roles, rights, permission evaluation, or access decisions
|
|
- organization units, functions, or function assignments
|
|
- external directory connector internals
|
|
|
|
## Module Contract
|
|
|
|
The module registers the `identity.directory` capability from
|
|
`govoplan_core.core.identity`.
|
|
|
|
Feature modules should consume the capability instead of importing identity ORM
|
|
models.
|
|
|
|
## Development Install
|
|
|
|
From the core checkout:
|
|
|
|
```bash
|
|
cd /mnt/DATA/git/govoplan-core
|
|
./.venv/bin/python -m pip install -e ../govoplan-identity
|
|
```
|