prevent permission privilege escalation by https-richardy · Pull Request #7 · https-richardy/httpsrichardy.federation

feature(#6): this commit introduces the injection of the permissions namespace policy service

https-richardy

committed

feature(#6): this commit introduces new 409 responses when attempting to create a reserved permission

https-richardy

committed

feature(#6): this commit introduces the new 409 response into the convention when there is an attempt to create a reserved permission

https-richardy

committed

feature(#6): this commit introduces new tests to the test suite to ensure that reserved permissions cannot be created

https-richardy

committed

feature(#6): this commit simplifies the creation of reserved permissions in the bootstrapper

https-richardy

committed

feature(#6): this commit defines the contract for the permission namespace policy service

https-richardy

committed

feature(#6): this commit defines the new error representing the error of attempting to create a reserved permission

https-richardy

committed

feature(#6): this commit introduces security policy restrictions/checks so that reserved permissions cannot be created, preventing privilege escalation.

https-richardy

committed

feature(#6): this commit renames the static constant class

https-richardy

committed

feature(#6): this commit introduces the implementation of the permissions namespace policy service

https-richardy

committed

feature(#6): this commit removes unnecessary global usage directive

https-richardy

committed

feature(#6): this commit renames the file and adds hash set for reserved permissions

https-richardy

committed

feature(#6): this commit introduces global usage reference to the “common.constants” namespace

https-richardy

committed

feature(#6): this commit fixes non-deterministic behaviors when running tests, correctly cleaning up resources

https-richardy

committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

prevent permission privilege escalation#7

prevent permission privilege escalation#7
https-richardy merged 14 commits into
masterfrom
fix/06-prevent-permission-privilege-escalation

Commits on Mar 13, 2026

feature(#6): this commit introduces the injection of the permissions namespace policy service

feature(#6): this commit introduces new 409 responses when attempting to create a reserved permission

feature(#6): this commit introduces the new 409 response into the convention when there is an attempt to create a reserved permission

feature(#6): this commit introduces new tests to the test suite to ensure that reserved permissions cannot be created

feature(#6): this commit simplifies the creation of reserved permissions in the bootstrapper

feature(#6): this commit defines the contract for the permission namespace policy service

feature(#6): this commit defines the new error representing the error of attempting to create a reserved permission

feature(#6): this commit introduces security policy restrictions/checks so that reserved permissions cannot be created, preventing privilege escalation.

feature(#6): this commit renames the static constant class

feature(#6): this commit introduces the implementation of the permissions namespace policy service

feature(#6): this commit removes unnecessary global usage directive

feature(#6): this commit renames the file and adds hash set for reserved permissions

feature(#6): this commit introduces global usage reference to the “common.constants” namespace

feature(#6): this commit fixes non-deterministic behaviors when running tests, correctly cleaning up resources