Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

MichaelUray / huly-platform Public

forked from hcengineering/platform

Notifications You must be signed in to change notification settings
Fork 0
Star 0

Code
Pull requests 4
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Pull requests
Actions
Projects
Security and quality
Insights

[ci-verify] Issue access management (stacked on mention-grants) - #7

#7

Closed

MichaelUray wants to merge 62 commits into

developMichaelUray/huly-platform:developfrom

ci-verify/issue-access-managementMichaelUray/huly-platform:ci-verify/issue-access-managementCopy head branch name to clipboard

Conversation Commits62 (62)Checks Files changed

Closed

[ci-verify] Issue access management (stacked on mention-grants)#7
MichaelUray wants to merge 62 commits into
developfrom
ci-verify/issue-access-management

Commits

Commits on Jul 9, 2026

feat(core): add ClassCollaborators.mentionsGrantAccess opt-in flag
MichaelUray
committed
eb35ef9
feat(model/core): wire mentionsGrantAccess into TClassCollaborators model class
MichaelUray
committed
1d4017e
feat(tracker): opt tracker.class.Issue into collaborator-grants-read + mentions-grant-access
MichaelUray
committed
0b9fa6a
feat(core/collaborators): add isomorphic resolveMentionGrantTarget helper
MichaelUray
committed
2d28f4b
feat(middleware/guest-permissions): veto field updates from collab-only guests on opt-in classes
MichaelUray
committed
b67689c
feat(tracker/utils): split canEditIssue into canEditIssueFields + canCommentOnIssue
MichaelUray
committed
be38db3
feat(tracker/EditIssue): show comment composer separately from field editors
MichaelUray
committed
f07d6e0
fix(chunter-resources): add @hcengineering/text-core dependency
MichaelUray
committed
863faf7
feat(chunter-trigger): mention-grants-access uses shared helper + grant-target dedup
MichaelUray
committed
961e33c
feat(chunter/ChatMessageInput): warn before mention auto-grants Issue access
MichaelUray
committed
d886ee0
feat(middleware/spaceSecurity): let Guests read collab-secured docs across spaces
MichaelUray
committed
f5157a0
feat(security): allow non-System callers to read their own Collaborator records
MichaelUray
committed
e6f6fcf
feat(security+nav): list collab-only spaces in workbench navigator for Guests
MichaelUray
committed
bc25a70
fix(nav): surface collab-only projects in tracker nav-tree
MichaelUray
committed
30ad68d
fix(tracker/nav): hide non-Issues sub-nodes on non-member projects
MichaelUray
committed
2c916a2
feat(tracker/nav): V1 - badge + tooltip for collab-only projects
MichaelUray
committed
28a25d1
test(tracker): V2 - mention-grant persists after issue moves to Done
MichaelUray
committed
8069e28
feat(text-core): V3a - grantsAccess attr on mention references
MichaelUray
committed
dc3e380
feat(chunter): V3b - per-grantee grant choices in send disclosure
MichaelUray
committed
ddb5018
feat(chunter-trigger): V3c - honour grantsAccess='false' on mentions
MichaelUray
committed
b72c062
feat(chunter-trigger): V3d - add-only re-grant on message edit
MichaelUray
committed
1a8f324
fix(chunter-trigger): V3d update-grant uses the edit actor + add tests
MichaelUray
committed
765da62
fix(chunter): preserve unsent comment when grant dialog is cancelled
MichaelUray
committed
f9fe39f
test(middleware): stub hierarchy.getAncestors for guest-permission uncovered-class test
MichaelUray
committed
2f66577
fix(workbench-resources/Navigator): correct activeClasses cast to Ref<Class<Space>>[]
MichaelUray
committed
d388c5a
fix: self-review BLOCKERs + IMPORTANT findings
MichaelUray
committed
4a73a17
fix(tracker/V1): guard space.members against null
MichaelUray
committed
34c8338
docs(tracker/V1): note scope limit on sub-node hide
MichaelUray
committed
caf9ebc
chore: apply repo formatting and lint fixes after develop merge
MichaelUray
committed
a8765c9
fix(middleware): backend-guard collab-read space-filter bypass (H5)
MichaelUray
committed
a1bb75b
fix(middleware): collab-only Write-Veto deckt auch TxRemoveDoc (L-RM)
MichaelUray
committed
97d5447
fix(middleware): guestPermissions fail-closed bei fehlendem Space (L-GP)
MichaelUray
committed
ec05335
fix(chunter-resources): align text-core to workspace:^0.7.19
MichaelUray
committed
93c13b4
feat(core): Collaborator provenance + access-level fields
MichaelUray
committed
3caba31
feat(core): ordinal access-level helper (evolution seam for level->role)
MichaelUray
committed
e112f74
feat(middleware): CollaboratorGuard - fail-closed gate for access-granting Collaborator writes
MichaelUray
committed
5342459
feat(server): register CollaboratorGuardMiddleware after GuestPermissions
MichaelUray
committed
ec85084
test(postgres): provenance fields on Collaborator are queryable via data JSONB
MichaelUray
committed
3b7a33a
feat(security): per-doc collaborator visibility for all non-admin roles (P2.2)
MichaelUray
committed
70ab491
feat(security): level-aware field-write enforcement for collab grants (P2.3)
MichaelUray
committed
fccc9d2
feat(tracker): access-grant confirm dialog + i18n strings (P3.2)
MichaelUray
committed
17bfee8
feat(tracker): issue Access panel with provenance, level and grant management (P3.1/P3.3)
MichaelUray
committed
f02b5f7
feat(core): AccessGroup and GroupGrant (with level) classes + guarded writes
MichaelUray
committed
1a810e0
feat(server): access-group grant materialization + reconcile triggers
MichaelUray
committed
7023bd9
feat(tracker): group grants in issue Access panel
MichaelUray
committed
b3c123c
feat(setting): access-group management UI + fail-closed AccessGroup guard
MichaelUray
committed
1a48a14
fix(server): drop unused Doc import in access-group resources
MichaelUray
committed
34b942b
chore(rush): register access-group packages + update lockfile (P4)
MichaelUray
committed
7f08f62
feat(chunter): pure mention-grant reconcile helper + unit tests (P5.3)
MichaelUray
committed
d3eb12c
feat(chunter): mention grants as Grant-v2 special case (P5.1/5.2/5.3)
MichaelUray
committed
8b9c61e
feat(chunter): fail-closed mention consent UI + inline grant warning (P5.2/M-G.5)
MichaelUray
committed
93f1d6e
fix(middleware): C-01 cross-space privilege escalation in collaborator guard
MichaelUray
committed
d3b06f3
fix(middleware): M-01 scope collab-read widening to grant classes only
MichaelUray
committed
119a424
fix(access-group): M-02 teardown group-collaborators on AccessGroup delete
MichaelUray
committed
96bc4ab
fix(chunter-resources): H-02 wire up jest so the P5 client test runs in CI
MichaelUray
committed
cdab027
fix(chunter): L-02 externalize mention-grant hint to IntlString (EN+DE)
MichaelUray
committed
23cc06a
fix(model-core): alias ArrOf model import to avoid duplicate identifier
MichaelUray
committed
0a331b9
fix(tracker-assets): i18n locale parity for access-management strings
MichaelUray
committed
ff5e447
fix(access-management): satisfy formatting gate (prettier + array-sort-compare)
MichaelUray
committed
17c2887
fix(access-management): align formatting with CI prettier/eslint output
MichaelUray
committed
948b75d
fix(setting-assets,chunter-assets): i18n locale parity for access-management strings
MichaelUray
committed
d040054
test(tracker): update mention-grant E2E coverage for IssueAccessPanel
MichaelUray
committed
80b8103

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.