Restricted access - #756

Open

kernicPanel wants to merge 22 commits into

mainfrom

restricted-access

Commits on Aug 21, 2026

🔧(dev) align demo passwords with keycloak realm
kernicPanel
committed
77c6124
♻️(backend) extract role resolution into a permissions backend
kernicPanel
committed
54a07fc
♻️(backend) move abilities computation to the permissions backend
kernicPanel
committed
e5dc7db
♻️(backend) split abilities into one property per ability
kernicPanel
committed
99ccd58
🚨(backend) refactor link validate to a single return
kernicPanel
committed
214cabb
✅(backend) tighten exception tests around raising calls
kernicPanel
committed
e1d8846
🐛(backend) override parent() to resolve it by exact path
kernicPanel
committed
7d55533
✨(backend) add is_restricted field to Item model
kernicPanel
committed
82f3b2c
✨(backend) add shortcut item type targeting another item
kernicPanel
committed
ef01070
✨(backend) add restrict ability with activation and deactivation states
kernicPanel
committed
29cefa3
✨(backend) activate restriction by moving the folder to the tree root
kernicPanel
committed
4697db3
✨(backend) deactivate restriction by reattaching at the shortcut
kernicPanel
committed
c42b3d3
✨(backend) normalize explicit accesses on restriction deactivation
kernicPanel
committed
f76987d
✨(backend) normalize explicit link reach on restriction deactivation
kernicPanel
committed
f54f395
✨(backend) expose is_restricted field in items API
kernicPanel
committed
d7c2f16
✨(backend) expose shortcut targets in the items API
kernicPanel
committed
144ff71
✨(backend) hide reachable restricted roots from the top-level listing
kernicPanel
committed
6091744
✨(backend) detach restricted folders by deleting their shortcut
kernicPanel
committed
faf0580
✨(backend) detach subtree shortcuts when an ancestor is trashed
kernicPanel
committed
6c267c2
✨(backend) detach the shortcut when a restricted folder is trashed
kernicPanel
committed
c9f7b2c
✨(backend) exclude shortcuts from search, export and indexing
kernicPanel
committed
955de79
✨(backend) allow restricting a folder at creation
kernicPanel
committed
2c57264

Navigation Menu

Uh oh!

Restricted access - #756

Restricted access#756
kernicPanel wants to merge 22 commits into
mainfrom
restricted-access

Commits on Aug 21, 2026

🔧(dev) align demo passwords with keycloak realm

♻️(backend) extract role resolution into a permissions backend

♻️(backend) move abilities computation to the permissions backend

♻️(backend) split abilities into one property per ability

🚨(backend) refactor link validate to a single return

✅(backend) tighten exception tests around raising calls

🐛(backend) override parent() to resolve it by exact path

✨(backend) add is_restricted field to Item model

✨(backend) add shortcut item type targeting another item

✨(backend) add restrict ability with activation and deactivation states

✨(backend) activate restriction by moving the folder to the tree root

✨(backend) deactivate restriction by reattaching at the shortcut

✨(backend) normalize explicit accesses on restriction deactivation

✨(backend) normalize explicit link reach on restriction deactivation

✨(backend) expose is_restricted field in items API

✨(backend) expose shortcut targets in the items API

✨(backend) hide reachable restricted roots from the top-level listing

✨(backend) detach restricted folders by deleting their shortcut

✨(backend) detach subtree shortcuts when an ancestor is trashed

✨(backend) detach the shortcut when a restricted folder is trashed

✨(backend) exclude shortcuts from search, export and indexing

✨(backend) allow restricting a folder at creation