feat(system): expose the permission matrix over RPC #69

Merged

nalum merged 1 commit from feat/permission-matrix-rpc into main 2026-08-14 16:55:56 +00:00

Conversation 2 Commits 1 Files changed 10 +441 -55

nalum commented 2026-08-14 14:22:56 +00:00

Owner

Copy link

Second part of #56: give clients the real permission matrix to gate affordances against, instead of a hand-kept mirror.

The web derives create/manage affordances from a coarse canEdit = Admin||Member flag — a client-side guess that drifts from the server's PermissionMatrix. That drift is what hides create controls from a child even where the matrix permits them. Rather than replace one hand-mirror with a smaller one, this exposes the server's actual matrix.

Adds SystemService.GetPermissionMatrix, returning roles.PermissionMatrix verbatim — the same reference data the auth interceptor enforces. Readable by every signed-in role; the server stays authoritative, this is advisory reference data only. The handler is trivial (return the compiled-in matrix); the RPC is auto-served by the Connect handler.

The web and Android consumers that read this matrix (fetch once, checkPermission(service, method, roles), replace canEdit) are tracked in #61. The CLI can consume the same endpoint.

Verified: make check passes (buf format/lint, Go tests, web build). Generated Go and Android clients are committed; web/src/gen is build-time generated and gitignored.

Closes #56 (the backend half — child rights plus this RPC).

🤖 Generated with Claude Code

Second part of #56: give clients the real permission matrix to gate affordances against, instead of a hand-kept mirror. The web derives create/manage affordances from a coarse `canEdit = Admin||Member` flag — a client-side guess that drifts from the server's `PermissionMatrix`. That drift is what hides create controls from a child even where the matrix permits them. Rather than replace one hand-mirror with a smaller one, this exposes the server's actual matrix. Adds `SystemService.GetPermissionMatrix`, returning `roles.PermissionMatrix` verbatim — the same reference data the auth interceptor enforces. Readable by every signed-in role; the server stays authoritative, this is advisory reference data only. The handler is trivial (return the compiled-in matrix); the RPC is auto-served by the Connect handler. The web and Android consumers that read this matrix (fetch once, `checkPermission(service, method, roles)`, replace `canEdit`) are tracked in #61. The CLI can consume the same endpoint. Verified: `make check` passes (buf format/lint, Go tests, web build). Generated Go and Android clients are committed; `web/src/gen` is build-time generated and gitignored. Closes #56 (the backend half — child rights plus this RPC). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

nalum added 1 commit 2026-08-14 14:22:56 +00:00

feat(system): expose the permission matrix over RPC ... 55da86bbb9

The clients derive create and manage affordances by hand from roles,
which drifts from the server's real PermissionMatrix — the root of the
canEdit defect in #56. Add SystemService.GetPermissionMatrix so a client
reads the server's actual matrix and gates affordances against the same
source the interceptor enforces, instead of a hand-kept mirror. Reference
data, open to every signed-in role. Part of #56.

nalum added the

enhancement

label 2026-08-14 14:22:57 +00:00

forgejo-actions commented 2026-08-14 14:26:32 +00:00

Copy link

Test report

Suite	Tests	Result	Skipped
Unit	1330	✅ pass	1
Integration	83	✅ pass	—

Coverage: 27.7%

_{Updated by the check workflow · commit d45901838c}

<!-- ci-test-report --> ## Test report | Suite | Tests | Result | Skipped | | --- | --: | --- | --: | | Unit | 1330 | ✅ pass | 1 | | Integration | 83 | ✅ pass | — | **Coverage:** 27.7% _{Updated by the check workflow · commit d45901838c99bd8fff9a1a0552a311b1e0dd8330}

nalum referenced this pull request 2026-08-14 14:32:52 +00:00

Drive UI create/manage/edit affordances off the permission matrix (web + Android) #61

nalum referenced this pull request 2026-08-14 14:33:17 +00:00

Child role: backend rights for list/meal management + expose the permission matrix #56

nalum referenced this pull request 2026-08-14 14:34:23 +00:00

Backlog ordering (tracking) #62

nalum referenced this pull request 2026-08-14 14:43:18 +00:00

feat(web): gate UI affordances on the permission matrix #70

nalum referenced this pull request 2026-08-14 15:14:19 +00:00

feat(android): gate affordances on the permission matrix #72

nalum force-pushed feat/permission-matrix-rpc from 55da86bbb9 to d45901838c 2026-08-14 16:03:15 +00:00 Compare

forgejo-actions commented 2026-08-14 16:46:57 +00:00

Copy link

Android test report

Suite	Tests	Result	Skipped
Unit (debug)	31	✅ pass	0

_{Updated by the android workflow · commit d45901838c}

<!-- android-test-report --> ## Android test report | Suite | Tests | Result | Skipped | | --- | --: | --- | --: | | Unit (debug) | 31 | ✅ pass | 0 | _{Updated by the android workflow · commit d45901838c99bd8fff9a1a0552a311b1e0dd8330}

nalum changed target branch from feat/child-shared-containers to main 2026-08-14 16:55:50 +00:00

nalum merged commit d45901838c into main 2026-08-14 16:55:56 +00:00

nalum deleted branch feat/permission-matrix-rpc 2026-08-14 16:55:56 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

adr

Needs or introduces an Architecture Decision Record

  

android

affects android app

  

area/calendar

The calendar surfaces: month, week, agenda, day sheet, events

  

area/design-system

Tokens, shared components and the row grammar both surfaces use

  

area/i18n

Strings, msgids and translation across surfaces

  

area/jobs

The jobs surface: board, card, sheet, create

  

area/offline

The offline write queue and sync behaviour

  

area/server

Server behaviour: RPCs, guards, domain rules, proto

  

area/testing

Conformance fixtures, goldens and test harnesses

  

bug

Something is not working

  

ci

CI and release pipeline

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

notifications

Push and notification system

  

question

More information is needed

  

reliability

Robustness, failure modes, resilience

  

security

Security finding or hardening work

  

severity/low

Low severity

  

severity/medium

Medium severity

  

tracking

Plan / tracking issues

  

web

affects web app

  

wontfix

This won't be fixed

No labels

adr

android

area/calendar

area/design-system

area/i18n

area/jobs

area/offline

area/server

area/testing

bug

ci

duplicate

enhancement

help wanted

invalid

notifications

question

reliability

security

severity/low

severity/medium

tracking

web

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

eagraiclainne/app!69

No description provided.