james.maesandClaude Opus 5.5 c9e5506cdf feat(policy): host-declared permission names join the full-access expansion ...

Custom-checker and named permissions (for example cdn.purge) are not listed
by PermissionsHelper.getAllAvailablePermissions, so full access missed them.
AuthentikQBitConfig.withFullAccessHostPermissions lets the host declare them;
they are computed at use time and only for the instance holding the runtime.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 15:24:21 -05:00

..

cluster-gitops-phase0

Phase 1: read-only MVP (memberships, sessions, events, effective permissions, drift report, mapper) (#4)

2026-10-12 06:08:37 -05:00

ACCESS-TOKENS.md

feat(tokens): scopes, last used, reminders and admin views (DESIGN.md section 13, phase 6c)

2026-10-13 22:26:53 -05:00

DESIGN.md

feat(admin): maintenance API to apply a policy through the audited Save Policy path

2026-10-14 15:17:28 -05:00

PHASE0-OWNER-CHECKLIST.md

feat: write contract tests, docs, status; recovery email prerequisites

2026-10-12 16:54:45 -05:00

POLICY-FORMAT.md

feat(policy): host-declared permission names join the full-access expansion

2026-10-14 15:24:21 -05:00

schema.sql

feat(tokens): access-token management (DESIGN.md section 13, phase 6b)

2026-10-13 21:58:46 -05:00

STATUS.md

feat(crud): phase 5c full user and group CRUD

2026-10-13 13:56:23 -05:00