feat(plugin-security,plugin-auth,verify,platform-objects)!: a permission-set grant names its set by name — no writer fills permission_set_id (#15204 stage 6b-2-pre) by objectstack-fleet[bot] · Pull Request #22863 · objectstack-ai/objectstack

wip(plugin-security,plugin-auth,verify,platform-objects): grants name their permission set — no writer fills permission_set_id

claude

committed

1a8d697

wip(plugin-security): pin the by-name grant refusal

claude

committed

49e9066

wip(plugin-security): tests follow grant-by-name (tenant wall, org-admin reconcile, name backfill)

claude

committed

13f9649

wip(plugin-security): fixtures grant by name against registered sets

claude

committed

a9be97d

wip(plugin-security): golden and gate fixtures grant by name

claude

committed

3b266b9

wip(plugin-security): legacy unnamed grants are written beneath the engine in tests; the reconcile's duplicate check keeps its legacy reach

claude

committed

375e419

wip(plugin-auth): tests follow grant-by-name — self-registration names its set with zero sys_permission_set rows

claude

committed

7c24854

wip(verify,platform-objects): the RLS persona and Setup's grant picker name the set

claude

committed

e612138

wip(tests): downstream fixtures grant by name

claude

committed

58dd8c5

wip: changesets and translations for grant-by-name

claude

committed

eea18d8

docs(permissions,skills): a grant names its permission set; the system-context census row follows the by-name refusal

claude

committed

5351a1a

wip(tests): dogfood grant fixtures by name; junction rows keep their id; no new query-option casts

claude

committed

f768b83

wip(tests): fake stored grants keep their legacy id beside the name; no duplicate keys

claude

committed

fc6e8f7

wip(cli): the uninstall integration grants and reads the package set by name

claude

committed

c9a19e6

Merge remote-tracking branch 'origin/main' into claude/issue-15204-s6b2pre-grant-by-name

claude

committed

92bda9e

docs(spec,api): the related-list Add example and the dangling-reference example no longer name permission_set_id

claude

committed

d453ea5

Navigation Menu

Repository navigation

feat(plugin-security,plugin-auth,verify,platform-objects)!: a permission-set grant names its set by name — no writer fills permission_set_id (#15204 stage 6b-2-pre) - #22863

feat(plugin-security,plugin-auth,verify,platform-objects)!: a permission-set grant names its set by name — no writer fills permission_set_id (#15204 stage 6b-2-pre)#22863
os-zhuang merged 16 commits into
mainfrom
claude/issue-15204-s6b2pre-grant-by-name

Commits on Oct 11, 2026

wip(plugin-security,plugin-auth,verify,platform-objects): grants name their permission set — no writer fills permission_set_id

wip(plugin-security): pin the by-name grant refusal

wip(plugin-security): tests follow grant-by-name (tenant wall, org-admin reconcile, name backfill)

wip(plugin-security): fixtures grant by name against registered sets

wip(plugin-security): golden and gate fixtures grant by name

wip(plugin-security): legacy unnamed grants are written beneath the engine in tests; the reconcile's duplicate check keeps its legacy reach

wip(plugin-auth): tests follow grant-by-name — self-registration names its set with zero sys_permission_set rows

wip(verify,platform-objects): the RLS persona and Setup's grant picker name the set

wip(tests): downstream fixtures grant by name

wip: changesets and translations for grant-by-name

docs(permissions,skills): a grant names its permission set; the system-context census row follows the by-name refusal

wip(tests): dogfood grant fixtures by name; junction rows keep their id; no new query-option casts

wip(tests): fake stored grants keep their legacy id beside the name; no duplicate keys

wip(cli): the uninstall integration grants and reads the package set by name

Merge remote-tracking branch 'origin/main' into claude/issue-15204-s6b2pre-grant-by-name

docs(spec,api): the related-list Add example and the dangling-reference example no longer name permission_set_id