Cordy/Cairn

Read-only space membership (viewer role via IdP group) #64

New issue

Closed

opened 2026-07-29 23:20:11 +00:00 by Cordy · 0 comments

Cordy commented

2026-07-29 23:20:11 +00:00

Owner

Derived from the public-sector analysis (#59, docs/PUBLIC-SECTOR.md). Auditor/internal-affairs persona: must read everything in a space, change nothing. Today every space member can write.

Design (follows the directory-is-the-source-of-truth philosophy — no parallel permission system):

Membership in <space>-ro grants read-only access to /spaces/<space> (suffix configurable, e.g. auth.spaceReadOnlySuffix, default -ro).
A user in both groups gets write (write wins).
Enforced in the scope overlay (internal/storage/scope) so web UI, REST, WebDAV, and TUS behave identically: reads/lists succeed, any mutation → 403.
Web UI: hide/disable upload, delete, rename, new-folder for read-only spaces (server remains the enforcement point).
/spaces listing includes read-only spaces (with a viewer indicator).

Acceptance: user only in case-x-ro can list/download in /spaces/case-x but PUT/DELETE/MKCOL fail with 403 across web + WebDAV; adding them to case-x in the IdP grants write at next sign-in with no Cairn-side change.

Derived from the public-sector analysis (#59, docs/PUBLIC-SECTOR.md). Auditor/internal-affairs persona: must read everything in a space, change nothing. Today every space member can write. **Design (follows the directory-is-the-source-of-truth philosophy — no parallel permission system):** - Membership in `<space>-ro` grants **read-only** access to `/spaces/<space>` (suffix configurable, e.g. `auth.spaceReadOnlySuffix`, default `-ro`). - A user in both groups gets write (write wins). - Enforced in the scope overlay (`internal/storage/scope`) so web UI, REST, WebDAV, and TUS behave identically: reads/lists succeed, any mutation → 403. - Web UI: hide/disable upload, delete, rename, new-folder for read-only spaces (server remains the enforcement point). - `/spaces` listing includes read-only spaces (with a viewer indicator). **Acceptance:** user only in `case-x-ro` can list/download in `/spaces/case-x` but PUT/DELETE/MKCOL fail with 403 across web + WebDAV; adding them to `case-x` in the IdP grants write at next sign-in with no Cairn-side change.

Cordy referenced this issue

2026-07-29 23:21:07 +00:00

Public-sector use-case analysis: shared spaces in practice + derived backlog #59

Cordy referenced this issue from a commit

2026-07-30 01:42:59 +00:00

test(scope): read-only space membership via <space>-ro groups (#64)

Cordy referenced this issue from a commit

2026-07-30 01:43:56 +00:00

ci: one-shot patch — read-only space membership (#64)

forgejo-actions referenced this issue from a commit

2026-07-30 01:46:01 +00:00

feat: read-only space membership via <space>-ro IdP groups (#64)

Cordy referenced this issue from a pull request that will close it,

2026-07-30 01:46:35 +00:00

Read-only space membership via <space>-ro IdP groups (#64) #67

Cordy referenced this issue from a commit

2026-07-30 01:48:06 +00:00

Merge pull request 'Read-only space membership via <space>-ro IdP groups (#64)' (#67) from feat/ro-spaces into main

Cordy closed this issue

2026-07-30 01:48:10 +00:00

Cordy referenced this issue

2026-07-30 02:00:00 +00:00

Dogfood .249: enable Spaces / Shares / Deleted files (v2 sidebar views) #50

Cordy referenced this issue

2026-07-30 02:56:11 +00:00

Web UI: drag-and-drop file upload #70

Cordy referenced this issue

2026-07-30 03:15:34 +00:00

Public-sector use-case analysis: shared spaces in practice + derived backlog #59

Cordy referenced this issue

2026-07-30 04:28:10 +00:00

Admin UI for audit log, legal holds, retention and read-only spaces #79

Cordy referenced this issue

2026-07-30 04:28:20 +00:00

Docs pass: ARCHITECTURE.md, SYNC.md and the site are behind the code #80

Cordy referenced this issue

2026-07-30 04:40:07 +00:00

Admin UI: audit viewer, legal-holds manager, read-only viewer badge (#79) #81

Cordy referenced this issue

2026-07-30 04:50:01 +00:00

Public-sector use-case analysis: shared spaces in practice + derived backlog #59

Cordy referenced this issue

2026-07-30 14:59:54 +00:00

Docs pass: ARCHITECTURE.md + README.md catch up to v0.3.21 (part of #80) #84

Cordy referenced this issue

2026-08-03 20:30:01 +00:00

Self-service spaces: create, own, and manage member access from the web UI #94

Cordy referenced this issue

2026-08-04 09:50:00 +00:00

Self-service spaces: create + member management brokered to the IdP (#94) #98

Cordy referenced this issue

2026-08-04 09:57:29 +00:00

Self-service spaces: create, own, and manage member access from the web UI #94

Cordy referenced this issue

2026-08-04 17:23:15 +00:00

Dogfood: self-service spaces + live group resolution end-to-end #111

Cordy referenced this issue

2026-08-15 15:31:59 +00:00

Peering: send into a Space's shared inbox (Space as a peering recipient) #244

Cordy referenced this issue

2026-08-15 16:03:46 +00:00

Peering: send into a Space's shared inbox (Space as a peering recipient) #244

forgejo-actions referenced this issue from a commit

2026-09-07 01:11:36 +00:00

docs run 2: consistency vs v0.6.132-137 + EULA cross-refs

Cordy referenced this issue

2026-09-07 01:12:29 +00:00

Docs run 2: EULA (draft v0.1) + consistency vs v0.6.132–137 #445

Cordy referenced this issue

2026-09-18 01:40:07 +00:00

fix(#588): the row menu offers only what the grant allows #593

Cordy referenced this issue

2026-09-18 02:01:29 +00:00

A read-only grant offers the full write menu under /shared (#529 2/3 follow-up) #588

Sign in to join this conversation.

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Cordy/Cairn#64

No description provided.