Zimin A.N.
c5b00ff623
User feedback: универсальный 'ordinis:approver' отступал от convention
'ordinis:<domain>:<action>'. Меняю на domain-specific:
WorkflowRoles constants:
- APPROVER → SCHEMA_REVIEWER ('ordinis:schema:reviewer')
- PUBLISHER → SCHEMA_PUBLISHER ('ordinis:schema:publisher')
- Новая RECORD_REVIEWER ('ordinis:record:reviewer')
Applied:
- SchemaDraftService.decide() → require SCHEMA_REVIEWER
- SchemaDraftService.publish() → require SCHEMA_PUBLISHER
- DraftService.approve() / .reject() → require RECORD_REVIEWER
Frontend usePermissions.ts:
- ROLE_APPROVER + ROLE_PUBLISHER → ROLE_SCHEMA_REVIEWER +
ROLE_SCHEMA_PUBLISHER + ROLE_RECORD_REVIEWER
- Новый hook useCanReviewRecord() для record draft actions
Keycloak setup (updated):
- ordinis:schema:reviewer
- ordinis:schema:publisher
- ordinis:record:reviewer
(Composite role 'ordinis:admin' = all три + scope roles — для удобства.)
25 lines
179 B
Plaintext
25 lines
179 B
Plaintext
target/
|
|
*.class
|
|
*.jar
|
|
*.war
|
|
*.iml
|
|
.idea/
|
|
.vscode/
|
|
.DS_Store
|
|
*.bak
|
|
|
|
# Maven
|
|
dependency-reduced-pom.xml
|
|
|
|
# Spring Boot
|
|
*.tmp
|
|
HELP.md
|
|
|
|
# Logs
|
|
*.log
|
|
|
|
# Sensitive
|
|
*.pem
|
|
*.key
|
|
.gstack/
|