Repository navigation
docs: DG debt wave 3 — route D tag trie (#803) and perm follow-ups (P5) - #54
Merged
Merged
Conversation
Close KI-322 and KI-323 (platform #810), record KI-329 to KI-331, document the Manual policies tab's Wider than its pattern rows and how Ranger picks tag policies (platform #809), the retried boot recompile of role-referencing profiles, and upgrade notes for #809 and #810. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Docs for DG debt Wave 3 part 1: platform #809 (issue #803, route D follows Ranger's tag trie) and platform #810 (P5: #787, #788, #789, #801, KI-322, KI-323).
Known issues
denygrant ofplatform_admin, which would exempt its holder from every classification clearance.ws_adminre-check at OIDC step-up, the target's roles) ignoreeffect(workspace form of KI-323).RoleRepo::platform_admin_user_idsignores expiry and effect; no server caller on main. Its twin in the engine-grant impersonation-chain check ignores both too and errs on the side of refusing.Pages
data-governance/classifications/index.md: new Manual policies section (columns, notes, the Wider than its pattern badge and sentence) and How the engines pick tag policies (Ranger's prefix lookup:*ireaches every tag).engines-and-policy/policy-editor.md: tag values with wildcards widen; limits bullet.deploy-operate/engines-and-ranger.md: the boot recompile of role-referencing profiles, its retry schedule and log lines.deploy-operate/upgrade.md: notes for platform #809 and #810.REST reference
Regenerating from platform main at #809 changes no page related to #809 (the generator does not render response fields). Regenerated again from platform main after #810 merged (42ff126a): no page related to #809 or #810 changes. The only diffs (
workflow.mdand the index count) come from unrelated platform PRs and are left out.Screenshots
None taken (Wave 4). Missing/stale: the classification's Manual policies tab has no screenshot; it should show a Wider than its pattern row.
npm run buildpasses (en and vi).🤖 Generated with Claude Code