#598: Used-by real share counts, fail-closed group delete #605

Merged

Cordy merged 4 commits from fix-598 into main

2026-09-18 12:04:55 +00:00

Cordy commented

2026-09-18 12:02:38 +00:00

Owner

Approved mockup batch A rev 1 blocks 6–7. New admin endpoint GET /api/v1/admin/groups/usage (one pass over grants, group-addressed only, links impossible by construction); groupDelete 409s naming grants while any address the group; membership changes proven not to touch grants. UI: lazy usage fetch, shares lead the Used-by cell, "Not used" state, click-to-expand read-only listing (path · owner · role). Go tests + usedByParts glue tests. Red witnessed, green across both suites.

Approved mockup batch A rev 1 blocks 6–7. New admin endpoint `GET /api/v1/admin/groups/usage` (one pass over grants, group-addressed only, links impossible by construction); groupDelete 409s naming grants while any address the group; membership changes proven not to touch grants. UI: lazy usage fetch, shares lead the Used-by cell, "Not used" state, click-to-expand read-only listing (path · owner · role). Go tests + usedByParts glue tests. Red witnessed, green across both suites.

Cordy added 4 commits

2026-09-18 12:02:39 +00:00

fix-598: one-shot red-green for Used-by share counts 646d4cfdca

fix-598: splice script (ascii-pure, escape sequences built via chr) 16475c8391

fix-598: splices moved to ascii-pure script aec615f70f

#598 : Used-by carries the real share count; group delete is fail-closed

ci / test-and-build (pull_request) Successful in 1m0s

Details

c553d7bcb0

GET /api/v1/admin/groups/usage returns every live group-addressed grant
(path, owner, role) keyed by lowercased group name; links and user
grants never appear. groupDelete 409s while grants address the group,
naming them. The Groups view fetches usage lazily, leads the Used-by
cell with the count, says 'Not used' instead of a dash, and clicking
the cell expands the read-only listing. i18n x4.