docs(adr): ADR-0105 — group tenancy posture and first-class org scope#3499
Draft
os-zhuang wants to merge 2 commits into
Draft
docs(adr): ADR-0105 — group tenancy posture and first-class org scope#3499os-zhuang wants to merge 2 commits into
os-zhuang wants to merge 2 commits into
Conversation
…rg scope Synthesizes the group/multi-plant architecture review: three tenancy postures (single | group | isolated), an accessible_org_ids union wall preserving ADR-0095 W1/W2, P0 fixes for authored-RLS stripping (collectRLSPolicies substring match) and uncontained wildcard VAMA in wall-less deployments, the cut-line doctrine for organizations vs business-unit trees, managed-table extension fields via the ADR-0092 whitelist, and a BU-subtree-to-organization promotion path along the single/group/isolated spectrum. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CbjR5BaHy9tGwUR8DoJA36
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
github-actions
Bot
added
size/m
documentation
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CbjR5BaHy9tGwUR8DoJA36
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Proposes ADR-0105: Group Tenancy Posture — Organization Scope as a First-Class Authorization Dimension, synthesizing the group/multi-plant (MES-shaped) architecture review into a formal decision record.
Core proposal: extend the tenancy spectrum to
single | group | isolated, where the newgroupposture makes organizations membership boundaries over one shared dataset, with an engine-enforced union wall (organization_id IN accessible_org_ids, Oracle-MOAC semantics) that preserves ADR-0095's W1/W2 invariants.Key contents
collectRLSPolicies(plugin-security/src/security-plugin.ts:2785-2791) substring-strips app-authored RLS policies referencingcurrent_user.organization_idwhen org-scoping is absent — an ADR-0049 "declared but unenforced" class defect.organization_admin's wildcardviewAllRecords/modifyAllRecords(auto-granted to every owner/admin) is contained only by the isolated-posture Layer 0 wall; wall-less deployments make org admins environment-wide superusers.PermissionSet.contextVariablesand the territory spec; productize therlsMembershipresolver seam.Status
Proposed / draft — opened for architect review. No runtime code changes in this PR; the two P0 findings (F1/F2) deserve issues filed independently of the ADR's acceptance.
🤖 Generated with Claude Code
https://claude.ai/code/session_01CbjR5BaHy9tGwUR8DoJA36
Generated by Claude Code