Skip to content

Hierarchical authorization plane, start-login helper, and PATs #102

Open
Feature
Open
Hierarchical authorization plane, start-login helper, and PATs#102
Feature
Labels
area: authAuthentication, authorization, identity, or tenant isolationarea: dataDatabase, schema, migration, ETL, or lineagearea: ui-uxFrontend, interaction, design, or user experiencepriority: mediumNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmenttype: featureNew or expanded product capability

Description

@seonghobae
seonghobae
opened on Aug 18, 2026

Focused slice of #2: issuer-side software-unit ACL, menu ABAC/RBAC, SSO combination scopes, org-path inheritance from Orgmetra assignment snapshots, app start-login helper, and hashed programmable application tokens.

Does not close #2. Orgmetra remains employment SoR. ADR-0008 PEP boundary stays. ADR-0009 remains reserved for the unmerged LineageWeave role/org/workspace profile on PR #100.

Tracks #2.

Metadata

Metadata

Assignees

No one assigned

    Labels

    area: authAuthentication, authorization, identity, or tenant isolationarea: dataDatabase, schema, migration, ETL, or lineagearea: ui-uxFrontend, interaction, design, or user experiencepriority: mediumNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmenttype: featureNew or expanded product capability

    Type

    Feature

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions