feat: Policy classes for entity-level authorization (#162) - #257

Merged

antosubash merged 8 commits into

mainfrom

feature/issue-162-policy-authorization

Jun 10, 2026

Commits on Jun 10, 2026

feat: add IPolicy<T> entity-level authorization layered over permissions (#162)
antosubash
committed
2be717a
fix: harden policy authorization from code-review findings
antosubash
committed
b25443f
fix: second hardening round for policy authorization (review round 2)
antosubash
committed
aabc469
fix: third hardening round for policy authorization (review round 3)
antosubash
committed
119da7e
fix: review round 4 — concurrency idempotency, generic-policy resource rules, doc accuracy
antosubash
committed
b0372c9
fix(notifications): mark-read inbox actions use fetch, not Inertia router
antosubash
committed
b99569b
feat: apply instance-level policies across modules; close authz gaps
antosubash
committed
b15cc6e
Merge remote-tracking branch 'origin/main' into worktree-issue-162-policies
antosubash
committed
723dc35