feat(coderd/rbac): compare scopes by permission coverage - #28167

Merged

BobbyHo merged 19 commits into

mainfrom

plat479-1-rbac-scope-coverage

Aug 20, 2026

Commits on Aug 14, 2026

feat(coderd/rbac): compare scopes by permission coverage
BobbyHo
committed
a672066

Commits on Aug 17, 2026

Merge branch 'main' into plat479-1-rbac-scope-coverage
BobbyHo
authored
4315706
docs(coderd/rbac): shorten the ScopesCover doc comment

BobbyHo
and
claude
committed
787c461

Commits on Aug 18, 2026

Merge branch 'main' into plat479-1-rbac-scope-coverage
BobbyHo
authored
2d39e04
fix(coderd/rbac): guard allowed-side org and user permissions

BobbyHo
and
claude
committed
2f6c44e
refactor(coderd/rbac): drop the unreachable negative skip in coverage
BobbyHo
committed
bd40270
test(coderd/rbac): pin the scope coverage table's weak assertions
BobbyHo
committed
3139c54
refactor(coderd/rbac): make the coverage guards reachable from tests
BobbyHo
committed
9276bb8
refactor(coderd/rbac): share the alias table and name the canonical contract
BobbyHo
committed
865eb9a
docs(coderd/rbac): document the expansion invariant where it can be broken
BobbyHo
committed
26a6bed

Commits on Aug 19, 2026

Merge branch 'main' into plat479-1-rbac-scope-coverage
BobbyHo
authored
7cca7b3
test(coderd/rbac): pin the coverage guards at one strength

BobbyHo
and
claude
committed
1678a77
fix(coderd/rbac): name the scope once in expansion errors

BobbyHo
and
claude
committed
aba3c6c
docs(coderd/rbac): correct the external scope list contract

BobbyHo
and
claude
committed
9a08105
docs(coderd/rbac): trim the restated coverage invariant

BobbyHo
and
claude
committed
2fcce8b
docs(coderd/rbac): correct the negative permission cross-reference
BobbyHo
committed
a775a48
docs(coderd/rbac): name every category IsExternalScope admits
BobbyHo
committed
e0c0d4a
test(coderd/rbac): pin the alias list invariants on the alias table
BobbyHo
committed
189740d
Merge branch 'main' into plat479-1-rbac-scope-coverage
BobbyHo
authored
7d08e49