Skip to content

WH-011, WH-058, WH-077, WH-078, WH-079: Roles, groups, CI gates, and Roles e2e fix - #4

Merged
msaouab merged 2 commits into
mainfrom
wh-011-permissions
Oct 18, 2026
Merged

msaouab merged 2 commits into
mainfrom
wh-011-permissions

Conversation

@msaouab

@msaouab msaouab commented Oct 18, 2026 •

Copy link
Copy Markdown
Owner

Summary

  • WH-011 / WH-058: custom roles, Manager preset, Groups tab, invite/member safety rules
  • WH-077 / WH-078: CI on GitHub + backlog “start all next implementations”
  • WH-079: Roles is a real page — fix Playwright app-shell; drop stray develop merge; delete leftover origin/develop

Test plan

  • Local pnpm nx e2e @work-hub/client-e2e → 13/13
  • CI Quality + integration green
  • CI Playwright e2e green
  • PR history has no Spring Boot / develop commit

msaouab and others added 2 commits October 18, 2026 16:06
…nagers, and a protected main

Workspace admins can now manage permissions: change a member's role,
and create, edit and delete custom roles (up to 3) with permissions
grouped by area, plus choose the default role for new members. Nobody
can grant or manage more than they hold: invites, role changes and
role edits are all limited to roles within your own permissions, the
Owner role is locked, and you can't edit your own role. Unknown
permissions are rejected, and built-in role names are reserved.

Add a Manager role (Member + approve leave + fulfil documents) to
every workspace, and Groups on the Team page: teams with members and
managers, where only people who can approve leave can be managers.
Postgres row-level security and composite foreign keys keep every
group inside its own workspace.

Protect main with a GitHub ruleset: changes arrive by pull request,
both CI checks must pass on an up-to-date branch, squash merge only.
After a commit, every next ticket at the top priority moves to in
progress, deleting a branch skips the push gate, and the translation
check understands dotted dynamic keys.

Refs: WH-011, WH-058, WH-077, WH-078
Roles is a real page now; stop expecting coming-soon there. Reset the
feature branch off the unrelated Spring Boot develop history, delete
origin/develop, and require e2e in reviews for user-facing tickets.

Co-authored-by: Cursor <cursoragent@cursor.com>
@msaouab
msaouab force-pushed the wh-011-permissions branch from ec7f2af to dd35ea7 Compare October 18, 2026 16:28
@msaouab msaouab changed the title Wh 011 permissions WH-011, WH-058, WH-077, WH-078, WH-079: Roles, groups, CI gates, and Roles e2e fix Oct 18, 2026
@msaouab
msaouab merged commit b812a59 into main Oct 18, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant