Skip to content

Hierarchical authorization plane, start-login helper, and PATs #102

Open
Feature
Open
Hierarchical authorization plane, start-login helper, and PATs#102
Feature
Labels
area: authAuthentication, authorization, identity, or tenant isolationarea: dataDatabase, schema, migration, ETL, or lineagearea: ui-uxFrontend, interaction, design, or user experiencedocumentationImprovements or additions to documentationenhancementNew feature or requestpriority: mediumNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmenttype: docstype: featureNew or expanded product capability

Description

@seonghobae
seonghobae
opened on Aug 18, 2026

Focused slice of #2: issuer-side software-unit ACL, menu ABAC/RBAC, SSO combination scopes, org-path inheritance from Orgmetra assignment snapshots, app start-login helper, and hashed programmable application tokens.

Does not close #2. Orgmetra remains employment SoR. ADR-0008 PEP boundary stays. ADR-0009 remains reserved for the unmerged LineageWeave role/org/workspace profile on PR #100.

Tracks #2.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area: authAuthentication, authorization, identity, or tenant isolationarea: dataDatabase, schema, migration, ETL, or lineagearea: ui-uxFrontend, interaction, design, or user experiencedocumentationImprovements or additions to documentationenhancementNew feature or requestpriority: mediumNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmenttype: docstype: featureNew or expanded product capability

    Type

    Feature

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions