Skip to content

Wh 011 permissions - #5

Merged
msaouab merged 4 commits into
mainfrom
wh-011-permissions
Oct 18, 2026
Merged

msaouab merged 4 commits into
mainfrom
wh-011-permissions

Conversation

@msaouab

@msaouab msaouab commented Oct 18, 2026

Copy link
Copy Markdown
Owner

No description provided.

msaouab and others added 4 commits October 18, 2026 16:06
…nagers, and a protected main

Workspace admins can now manage permissions: change a member's role,
and create, edit and delete custom roles (up to 3) with permissions
grouped by area, plus choose the default role for new members. Nobody
can grant or manage more than they hold: invites, role changes and
role edits are all limited to roles within your own permissions, the
Owner role is locked, and you can't edit your own role. Unknown
permissions are rejected, and built-in role names are reserved.

Add a Manager role (Member + approve leave + fulfil documents) to
every workspace, and Groups on the Team page: teams with members and
managers, where only people who can approve leave can be managers.
Postgres row-level security and composite foreign keys keep every
group inside its own workspace.

Protect main with a GitHub ruleset: changes arrive by pull request,
both CI checks must pass on an up-to-date branch, squash merge only.
After a commit, every next ticket at the top priority moves to in
progress, deleting a branch skips the push gate, and the translation
check understands dotted dynamic keys.

Refs: WH-011, WH-058, WH-077, WH-078
Roles is a real page now; stop expecting coming-soon there. Reset the
feature branch off the unrelated Spring Boot develop history, delete
origin/develop, and require e2e in reviews for user-facing tickets.

Co-authored-by: Cursor <cursoragent@cursor.com>
The shell test still expected the coming-soon placeholder on
/s/{slug}/roles, which WH-011 replaced with the real Roles page; it
now checks the real page instead. Reviews now include an e2e run for
user-facing tickets. Remove the WH-011, WH-058, WH-077 and WH-078
tickets after their commit, and make workspace setup and holidays
the next milestone (P1).

Refs: WH-079
@msaouab
msaouab merged commit 0b6933e into main Oct 18, 2026
3 checks passed
@msaouab
msaouab deleted the wh-011-permissions branch October 18, 2026 16:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant