feat(edgraph): add an AccessController and separate identity from tenancy - #9813

Open

matthewmcneely wants to merge 8 commits into

mainfrom

matthewmcneely/accesscontroller-abstraction

Commits on Aug 25, 2026

fix(x): value-lock reserved predicates by prefix, and use the derived context in ExpandEdges

matthewmcneely
and
claude
committed
25a5bf4
feat(x): make tenant resolution pluggable, separating it from ACL

matthewmcneely
and
claude
committed
1fbfa84
feat(x): resolve caller identity once, at the edge

matthewmcneely
and
claude
committed
27c384a
feat(edgraph): abstract authorization behind an AccessController

matthewmcneely
and
claude
committed
52cc62e
docs(edgraph): correct authorizeClusterAdmin's list of gated operations

matthewmcneely
and
claude
committed
77dc5f9
test: pin the ClearIncomingNamespace entry-point guards

matthewmcneely
and
claude
committed
dc8d472
test(dgraphtest): add WithWhitelist, and cover ACL-off cluster authority

matthewmcneely
and
claude
committed
8bdcc90

Commits on Aug 27, 2026

fix(dgraphtest): restore Zero's security env that this branch had deleted

matthewmcneely
and
claude
committed
2ca6463