spec(openbuilt-rbac): per-virtual-app RBAC change artifacts#6

Merged

rubenvdlinde merged 11 commits into

developmentfrom

feature/spec-openbuilt-rbac

May 12, 2026

Commits on May 12, 2026

spec(openbuilt-rbac): add per-virtual-app RBAC change artifacts
rubenvdlinde
committed
Apply openbuilt-rbac change — controller enforcement, frontend gating, repair step, modal, tests
rubenvdlinde
committed
fix(rbac): close list-endpoint IDOR + audit admin bypass to OR trail
rubenvdlinde
committed
fix(rbac): document <permission> navigation gate gap, link upstream NC issue
rubenvdlinde
committed
refactor(i18n): flip openbuilt.rbac.* dotted keys to plain English
rubenvdlinde
committed
fix(quality): clean up PHPCS errors + phpmd thresholds + psalm OR stubs
rubenvdlinde
committed
test(rbac): add Newman collection covering REQ-OBRBAC-002/003/005
rubenvdlinde
committed
test(rbac): add Playwright e2e — non-member blackout (REQ-OBRBAC-002/003)
rubenvdlinde
committed
test(rbac): add Vitest — useRole (19) + PermissionsModal (8) = 27 tests
rubenvdlinde
committed
fix(ci): regenerate lockfile + stylelint auto-fixes
rubenvdlinde
committed
fix(quality): raise ExcessiveClassComplexity threshold for the integration controller
rubenvdlinde
committed