Repository navigation

Add role-based access control - #5518

Merged

WilliamBZA merged 56 commits into

masterfrom

auth

Jul 7, 2026

Merged

Add role-based access control#5518
WilliamBZA merged 56 commits into
masterfrom
auth

Commits on Jun 4, 2026
- Add permissions catalog with constants for access control
  ramonsmits
  committed
  6125b09
- 1st pass of registering an authorization provider
  ramonsmits
  committed
  e1082ad
- ✨ Per-IdP roles claim path via IClaimsTransformation
  ramonsmits
  committed
  9cb0f09
Commits on Jun 5, 2026
- 🐛 Authorize policies require authenticated user
  ramonsmits
  committed
  5ae3c44
- 🐛 Wire authorization in acceptance-test runners
  ramonsmits
  committed
  8e06d2a
- 🐛 Accept-token tests must supply a role-bearing claim
  ramonsmits
  committed
  99923fe
- ✅ Approve RolesClaim in PlatformSampleSettings snapshots
  ramonsmits
  committed
  746cefb
- Fix rebase issues
  WilliamBZA
  committed
  387a416
- magic number
  ramonsmits
  committed
  b29e1b1
- 🐛 Always register the permission policy provider
  ramonsmits
  committed
  41dcf2a
- 🐛 OIDC enabled tests must enable RBAC explicitly
  ramonsmits
  committed
  95c6c63
- ✅ Refresh PlatformSampleSettings snapshots for RBAC settings
  ramonsmits
  committed
  89977de
Commits on Jun 8, 2026
- magic number
  
  ramonsmits
  authored and
  WilliamBZA
  committed
  af98ef4
- Make role based always on, but only filter if auth enabled
  WilliamBZA
  committed
  1811c14
Commits on Jun 10, 2026
- Merge pull request #5519 from Particular/roleclaimconfigurable
  ramonsmits
  authored
  b7ad2e4
Commits on Jun 11, 2026
- Merge remote-tracking branch 'origin/master' into auth
  ramonsmits
  committed
  467baa3
Commits on Jun 19, 2026
- Audit log for authorization decisions (#5520)
  
  ramonsmits
  and
  WilliamBZA
  authored
  a28df24
Commits on Jun 22, 2026
- Add service.name/version to OTLP log resource (#5536)
  ramonsmits
  authored
  febce88
Commits on Jul 1, 2026
- Expose a per-instance my/routes authorization manifest (#5538)
  
  WilliamBZA
  and
  ramonsmits
  authored
  3825fc2
- ✨ Add AuditUser and message-action enums
  ramonsmits
  committed
  92db56c
- ✨ Add MessageActionAuditLog ECS emitter
  ramonsmits
  committed
  c5a031c
- ✨ Add ICurrentUserAccessor for audit identity resolution
  ramonsmits
  committed
  757b737
- ✨ Add AuditHeaders identity stamp/read seam
  ramonsmits
  committed
  8aa8747
- ✨ Register message-action audit services
  ramonsmits
  committed
  9280bec
- ✅ Guard that ServiceControl.Audit.Messages routes to the audit sink
  ramonsmits
  committed
  fb04b91
- ✨ Audit group-retry operations
  ramonsmits
  committed
  3bdbb51
- ✨ Audit group-archive and group-unarchive operations
  ramonsmits
  committed
  c07fd56
- ✨ Audit direct retry operations
  ramonsmits
  committed
  70a6e2c
- ✨ Audit archive, unarchive, and pending-retry operations
  ramonsmits
  committed
  44fe317
- ✅ Strengthen batch-audit test assertions (count/resource)
  ramonsmits
  committed
  a9b6151
- ✨ Audit per-message entries for batch id operations
  ramonsmits
  committed
  c4cd4bd
- ✅ File-scoped namespaces and per-message coverage for audit tests
  ramonsmits
  committed
  68a5706
Commits on Jul 2, 2026
- Replace wildcard role-permission expansion with explicit lists (#5571)
  ramonsmits
  authored
  000f47e
Commits on Jul 3, 2026
Commits on Jul 6, 2026
- Audit edit operations
  
  WilliamBZA
  authored and
  ramonsmits
  committed
  b869ba1
- Update assertions
  
  WilliamBZA
  authored and
  ramonsmits
  committed
  c7d5f50
- Use correct permissions for roles (#5578)
  WilliamBZA
  authored
  b89f22e
- Remove some unneeded white box tests
  ramonsmits
  authored
  92d6f94
- Use File-scoped namespaces
  ramonsmits
  authored
  24bac90
- Trying to fix format
  dvdstelt
  committed
  f0b1547
- 🐛 Register IMessageActionAuditLog in all hosts that consume the input queue
  ramonsmits
  committed
  dc7258e
- 🐛 Keep audit attribution on archive operation documents across batches
  ramonsmits
  committed
  a2321a5
- 🐛 Audit pending retries at staging time instead of intent time
  ramonsmits
  committed
  5a413f5
- 🐛 Keep the remote instance's Request-Id on forwarded responses
  ramonsmits
  committed
  f9fa13d
- 🐛 Don't audit group operations that are skipped as already in progress
  ramonsmits
  committed
  d74676b
- 🐛 Record the real outcome on operation audit entries
  ramonsmits
  committed
  2350e6f
- 🐛 Audit an edit only after the edited message is dispatched
  ramonsmits
  committed
  b21b402
- 🐛 Carry the batch scope on ArchiveMessage per-message audit entries
  ramonsmits
  committed
  4ab9d35
- 🐛 Deflake AllMessagesInUnArchivedGroupShouldNotExpire
  ramonsmits
  committed
  b1ce6b1
- ⚡️ Skip building ECS audit documents for filtered-out categories
  ramonsmits
  committed
  252e333
- ⚡️ Export the audit documents as the OTLP record body
  ramonsmits
  committed
  df2f4ed
Commits on Jul 7, 2026
- Merge pull request #5570 from Particular/audit-message-actions
  dvdstelt
  authored
  000c8d2

Commits

Commits on Jun 4, 2026

Commits on Jun 5, 2026

Commits on Jun 8, 2026

Commits on Jun 10, 2026

Commits on Jun 11, 2026

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Commits on Jul 1, 2026

Commits on Jul 2, 2026

Commits on Jul 3, 2026

Commits on Jul 6, 2026

Commits on Jul 7, 2026