feat(plugin-auth): a SCIM group push grants the ordinary permission set its group mapping names by objectstack-fleet[bot] · Pull Request #31443 · objectstack-ai/objectstack

feat(plugin-auth): SCIM group push grants mapped permission sets (WIP)

claude

committed

2e9c46f

test(plugin-auth): SCIM group mapping acceptance pins, route ledger and dogfood rows, changeset

claude

committed

97d9076

test(plugin-auth): the hand-made admin grant carries its organization

claude

committed

682f670

chore(platform-objects): translation bundles for sys_idp_group_mapping

claude

committed

b6fd47b

fix(plugin-auth): literal group-mapping mounts, typed write receivers; census and ownership rows

claude

committed

81403c6

chore: platform-object tenancy census row for sys_idp_group_mapping

claude

committed

776f80e

Merge origin/main into claude/project-thread-dv4dek

claude

committed

1efd345

test(plugin-auth): pin organization-less connections and the reconcile-time boundary (red)

claude

committed

cdd2348

fix(plugin-auth): refuse an organization-less SCIM connection at save; reconcile judges every grant before it writes

claude

committed

fe3aea7

fix(plugin-auth): the projected grant carries its organization as the write's tenant; census regenerated

claude

committed

0110f58

Merge remote-tracking branch 'origin/main' into claude/project-thread-dv4dek

claude

committed

ae12be8

chore(platform-objects): pt-BR labels for sys_idp_group_mapping

claude

committed

fe826d6

test(plugin-auth): read the saved mapping id through a typed helper

claude

committed

d6b9645

fix(cli): ADR-0131 D10 inventory row for sys_idp_group_mapping

claude

committed

20e729e

chore: changeset names the cli inventory row

claude

committed

6244fbd

Merge remote-tracking branch 'origin/main' into claude/project-thread-dv4dek

claude

committed

52aa0fc

chore(platform-objects): ru labels for sys_idp_group_mapping

claude

committed

861c284

fix(cli): keep the tracker id out of the inventory citation

claude

committed

42f6076

test(plugin-auth): a revoked SCIM credential does not decide the mapping's organization (red)

claude

committed

ef76a59

fix(plugin-auth): read a SCIM connection's organization from its live credentials only

claude

committed

ff3c8f8

chore: changeset says only live credentials decide the organization

claude

committed

59e94f9

test(plugin-auth): widen the S4 pin's body cast through unknown

claude

committed

b13015e

test(plugin-auth): a mapping re-save after the connection moved organization (red), and liveness unit cases

claude

committed

82e0cee

fix(plugin-auth): refuse a mapping re-save whose same-key row lives in another organization

claude

committed

18a95de

chore: ledger note and changeset name the cross-organization re-save refusal

claude

committed

95349ed

Merge remote-tracking branch 'origin/main' into claude/project-thread-dv4dek

claude

committed

1ccf149

chore(platform-objects): de labels for sys_idp_group_mapping

claude

committed

d8ef8e6

Navigation Menu

Repository navigation

feat(plugin-auth): a SCIM group push grants the ordinary permission set its group mapping names - #31443

feat(plugin-auth): a SCIM group push grants the ordinary permission set its group mapping names#31443
objectstack-fleet[bot] merged 27 commits into
mainfrom
claude/project-thread-dv4dek

Commits on Nov 8, 2026

feat(plugin-auth): SCIM group push grants mapped permission sets (WIP)

test(plugin-auth): SCIM group mapping acceptance pins, route ledger and dogfood rows, changeset

test(plugin-auth): the hand-made admin grant carries its organization

chore(platform-objects): translation bundles for sys_idp_group_mapping

fix(plugin-auth): literal group-mapping mounts, typed write receivers; census and ownership rows

chore: platform-object tenancy census row for sys_idp_group_mapping

Merge origin/main into claude/project-thread-dv4dek

test(plugin-auth): pin organization-less connections and the reconcile-time boundary (red)

fix(plugin-auth): refuse an organization-less SCIM connection at save; reconcile judges every grant before it writes

fix(plugin-auth): the projected grant carries its organization as the write's tenant; census regenerated

Merge remote-tracking branch 'origin/main' into claude/project-thread-dv4dek

chore(platform-objects): pt-BR labels for sys_idp_group_mapping

test(plugin-auth): read the saved mapping id through a typed helper

fix(cli): ADR-0131 D10 inventory row for sys_idp_group_mapping

chore: changeset names the cli inventory row

Merge remote-tracking branch 'origin/main' into claude/project-thread-dv4dek

chore(platform-objects): ru labels for sys_idp_group_mapping

fix(cli): keep the tracker id out of the inventory citation

test(plugin-auth): a revoked SCIM credential does not decide the mapping's organization (red)

fix(plugin-auth): read a SCIM connection's organization from its live credentials only

chore: changeset says only live credentials decide the organization

test(plugin-auth): widen the S4 pin's body cast through unknown

test(plugin-auth): a mapping re-save after the connection moved organization (red), and liveness unit cases

fix(plugin-auth): refuse a mapping re-save whose same-key row lives in another organization

chore: ledger note and changeset name the cross-organization re-save refusal

Merge remote-tracking branch 'origin/main' into claude/project-thread-dv4dek

chore(platform-objects): de labels for sys_idp_group_mapping